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I.  JURISDICTION  AND  VENUE 

1.  This  Court  has  subject  matter  jurisdiction  pursuant  to  28  U.S.C.  §  1332(d),  as  the  amount 
in  controversy  exceeds  $75,000.00  and  supplemental  jurisdiction  pursuant  to  28  U.S.C. 
§1367. 

2.  This  Court  also  has  diversity  jurisdiction  pursuant  to  28  U.S.C.  §§  1331  1332  because 
Plaintiffs  reside  in  North  Carolina,  and  Facebook  Defendants  (hereafter  “FB”  or  “FB 
Defendants  “)  reside  and/or  do  business  in  California  and  North  Carolina. 

3.  This  action  is  also  brought  pursuant  to  the  U.S.  Constitution,  as  authorized  by  Article  III, 
section  2,  which  extends  federal  judicial  power  to  all  cases  arising  in  equity  under  the 
U.S.  Constitution. 

4.  This  grant  of  equitable  jurisdiction  requires  Article  III  courts  to  apply  the  underlying 
principles  of  the  U.S.  Constitution  to  new  circumstances  unforeseeable  by  the  Framers 
off  the  Constitution. 

5 .  An  actual  controversy  has  arisen  and  exists  between  Plaintiffs  and  FB  Defendants 
because  FB  Defendants  have  placed  Plaintiff  Zimmerman  in  a  dangerous  situation  and 
continue  to  infringe  upon  Zimmerman’s  constitutional  rights  and  have  abrogated  their 
duty  of  care  to  ensure  Zimmerman’s  reasonable  safety,  among  other  violations  of  federal 
and  state  law. 

6.  The  U.S.  Constitution  recognizes  and  preserves  the  fundamental  right  of  citizens  to  be 
free  from  such  actions  that  harm  life,  liberty,  and  property,  including  our  nation’s  election 
systems,  privacy  and  free  speech  (especially  political  speech),  which  are  critical  to 
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Zimmerman’s  rights  to  life,  liberty,  and  property  and  which  have  been,  and  continue  to 
be,  harmed  by  FB  Defendants 

7.  The  above  named  inherent  and  inalienable  rights  reflect  the  bedrock  societal  guaranty 
inherent  in  the  U.S.  Constitution,  which  is  to  protect  citizens  and  posterity  from 
unconstitutional  infringement  upon  basic  freedoms  and  human  and  natural  rights. 

8.  The  rights  to  life,  liberty,  and  property  have  evolved  and  continue  to  evolve  as 
technological  advances,  as  here,  pose  new  challenges  to  these  fundamental  rights  and  as 
new  insights  reveal  discord  between  the  Constitution’s  central  protections  and  the 
conduct  of  government  and  private  parties. 

9.  This  case  is  likely  one  of  the  first  filed  in  this  Court  that  addresses  the  relationship 
between  the  First  Amendment  and  the  Internet-based  FB  communications  platform. 

10.  A  fundamental  principle  of  the  First  Amendment  is  that  all  persons  have  unfettered 
access  to  places  where  they  can  speak  and  listen,  and  then,  after  reflection,  speak  and 
listen  once  more.  A  basic  rule  is  that  a  street  or  a  park  is  a  quintessential  forum  for  the 
exercise  of  First  Amendment  rights.  See  Wardv.  Rock  Against  Racism,  491  U.  S.  781, 
796  (1989). 

1 1 .  FB  often  brags  that  it  offers  its  users  a  free  facility  for  communications  of  all  kinds.  See 
Reno  v.  American  Civil  Liberties  Union,  521  U.  S.  844,  868  (1997). 

12.  Among  many  other  promises,  FB  maintains  that  its  users  can  debate  religion  and  politics. 

13.  All  fifty  states,  thousands  of  cities  and  towns,  and  almost  every  elected  U.S. official  have 
FB  accounts. 
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14.  Also,  federal  courts  always  have  the  authority  to  determine  whether  they  have  the 
jurisdiction  to  hear  a  particular  case.  United  States  v.  Ruiz,  536  U.S.  622,  628  (2002) 
(citing  United  States  v.  Mine  Workers  of  Am,  330  U.S.  258,291  (1947).  This  Court  also 
has  original  jurisdiction  over  this  action  pursuant  to  28  U.S.C.  §1331  as  this  action 
involves  allegations  of  violations  of  the  U.S.  Constitution. 

1 5.  Venue  is  proper  in  this  judicial  district  pursuant  to  28  U.S.C.  §  1391(e)  because  the  FB 
Defendants  are  subject  to  personal  jurisdiction  in  this  judicial  district  because  they  reside 
and/or  do  business  in  this  district. 

16.  Venue  is  also  proper  in  this  District  pursuant  to  28  U.S.C.  §1391(b)(2)  because  a 
substantial  part  of  the  conduct  and  events  giving  rise  to  Plaintiffs  claims  occurred  in  this 
District. 

17.  Venue  is  also  proper  because  a  substantial  part  of  the  conduct  giving  rise  to  Plaintiffs 
claims  occurred  in  or  emanated  from  this  District  and  the  relevant  terms  of  Plaintiff  s 
contracts  with  FB  provide  that  the  exclusive  venues  for  litigating  any  claim  with  FB  are 
either  the  United  States  District  Court  for  the  Northern  District  of  California  or  a  state 
court  located  in  San  Mateo  County.  These  non-negotiable,  FB  adhesion  contracts  also 
provided  that  all  claims  that  might  arise  between  the  user  and  FB  would  be  governed  by 
the  laws  of  California,  without  regard  to  conflict-of-law  provisions. 

18.  The  FB  venue  provision  provides  an  additional  reason  that  venue  is  proper  in  this 
District.  That  choice-of-law  provision  establishes  that  California  law  applies  to  Plaintiffs 
claims. 
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19.  Moreover,  with  regard  to  the  choice  of  law,  FB’s  “Terms  of  Service”  (formerly  known  as 
the  “Statement  of  Rights  and  Responsibilities”)  contain  (and  have  always  contained)  a 
forum  selection  provision  that  mandates  the  resolution  of  any  claim,  arising  either  out  of 
the  “Terms  of  Service”  or  a  person’s  use  of  FB,  exclusively  in  the  U.S.  District  Court  for 
the  Northern  District  of  California  and  provides  that  FB  users  submit  to  the  personal 
jurisdiction  of  those  courts  to  litigate  those  claims. 

20.  In  addition,  the  FB  “Terms  of  Service”  contain  (and  have  contained  since  at  least  April 
26,  201 1)  a  California  choice-of-law  provision,  which  provides  that  California  law 
applies  to  “any  claim  that  might  arise  between”  a  user  and  FB. 

21 .  Plaintiffs  could  not  have  brought  forth  the  entirety  of  their  claims  until  whistleblower 
Christopher  Wylie  testified  to  the  U.K.  Parliament  in  2018  that  on  or  about  July  2014 
FB’s  engineers  assisted  Cambridge  Analytica  with  its  plundering  of  the  personal 
information  of  nearly  a  hundred  million  FB  users. 

II.  THE  PARTIES 

22.  Plaintiffs  repeat  and  re-allege  all  preceding  and  following  paragraphs  as  if  fully  set  forth 
herein. 

23.  Plaintiff,  Robert  Zimmerman  (“Zimmerman”),  is  nearly  79  years  old,  a  registered  voting 
voter  and  veteran  who  resides  in  Hampstead,  North  Carolina. 
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24.  He  has  written  three  political  books  that  set  out  progressive  agendas  for  the  U.S.: 
Metacapitalism  (1985),  the  American  Challenge  (2005)  and  Common  Sense  (2016) 
available  online  free  of  charge. 

25.  Zimmerman  was  also  a  grassroots  Democratic  candidate  for  the  U.S.  Senate,  finishing 
second  of  eight  candidates  in  a  Democratic  primary,  losing  to  a  multi-term,  favorite  son 
incumbent. 

26.  While  campaigning,  Zimmerman  was  arrested  for  trespassing  in  a  downtown  public  park 
and  at  a  state  fair  for  distributing  copies  of  the  U.S.  Constitution  and  his  campaign  brochure 
to  prospective  voters  and  was  found  not  guilty. 

27.  Plaintiff  Uxor  Press  is  a  small  unincorporated  publishing  business,  100%  owned  by 
Zimmerman.  Uxor  Press  published  die  books  listed  above  and  a  few  others. 

28.  Zimmerman’s  political  activities  and  books  demonstrate  that  he  has  been  deeply  involved 
in  U.S.  politics  for  over  three  decades  and  has  been  severely  damaged  directly  and 
indirectly  by  the  anti-democratic  conspiratorial  and  non-conspiratorial  actions  and 
inactions  of  FB  Defendants. 

29.  FB,  Inc.  is  incorporated  in  the  State  of  Delaware.  It  has  principal  offices  at  1601  Willow 
Road  and  at  1  Hacker  Way,  both  in  Menlo  Park,  California  94025. 

30.  FB  Defendant  Mark  Zuckerberg  (hereafter  “Zuckerberg”  or  “Mark  Zuckerberg”  or  “FB 
Defendants”  or  “FB”).  He  is  FB’s  co-founder  and  Chief  Executive  Officer  at  all  relevant 
times. 
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3 1 .  FB  Defendant  Sheryl  Sandberg  (hereafter  “Sandberg”  or  “Sheryl  Sandberg”  or  “FB 
Defendants”  or  “FB”  is  FB’s  Chief  Operating  Officer  (“COO”). 

32.  Named  and  unnamed  unserved  John  and  Jane  Does. 

III.  INTRODUCTION  TO  AND  SUMMARY  OF  THE  ,  WILLFUL  AND 
RECKLESS  MISCONDUCT  OF  FB  DEFENDANTS 

33.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  if  fully  set  forth  herein. 

34.  FB,  Inc.  (hereafter  “FB”)  is  arguably  the  world’s  most  powerful  corporation,  with  a 
global  audience  of  some  2.2  billion  people,  who  use  its  platform  to  message  with  each 
other,  for  local,  nation  and  international  news  and  many  other  purposes. 

35.  FB  Defendants,  (hereafter  referred  to  collectively  as  FB  or  Facebook,  have  used  and 
continue  to  use  the  FB  platform  and  their  immense  wealth  to  transform  the  world, 
particularly  the  U.S.  in  ways  that  only  the  FB  can  control,  including  the  successful 
sabotage  of  the  2016  presidential  election  cycle  and  the  prospective  introduction  of  FB’s 
own  international  currency  under  the  aegis  of  Swiss  law. 

36.  Hundreds  of  millions  of  FB  users  obtain  most  of  their  news  by  from  the  FB  platform  and 
that  news  is  selected  by  FB  without  any  recompense  by  FB  to  the  legitimate  global  press. 

37.  FB  does  not  any  of  deploy  standard  journalistic  fact  checking  safeguards  to  avoid  fake  news 
and  other  forms  of  misleading  propaganda  such  as  that  deployed  by  Russian  operatives,  the 
Trump  Campaign,  Cambridge  Analytica,  Robert  Mercer  and  others  during,  and  now  after,  the 
2016  U.S.  presidential  election  cycle. 
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38.  FB  violated  Plaintiff  Zimmerman’s  First  Amendment  rights  by  first  granting  him  and  his 
publishing  company  unfettered  access  to  the  FB  platform  and  then  unlawfully  revoking 
that  access  causing  Plaintiffs  severe  economic  harm  and  other  injuries. 

39.  After  revoking  Plaintiffs  access,  FB  has  admitted  that  they  granted  unfettered  access  to 
FB  user  information,  such  as  Plaintiffs’  had  supplied  to  FB  in  order  to  gin  unfettered 
access  to  the  FB  platform,  to  numerous  third  parties  without  Plaintiffs  knowledge  or 
consent  and  in  doing  so,  FB  caused  billions  of  FB  users’  privacy  to  be  invaded  and 
inflicted  severe  economic  harm  and  other  injuries  on  them. 

40.  In  2018,  investigative  journalists  discovered  that  a  British  political  consulting  and 
information  mining  firm  called  Cambridge  Analytica  unlawfully  obtained  the  FB  user’ 
information  of  many  millions  of  FB  users,  possibly  including  that  of  the  Plaintiffs,  and 
used  it  in  various  ways  together  with  others  to  successfully  sabotage  the  2016  U.S.  and  the 
2020  presidential  election  cycles  in  favor  of  candidate  Donald  J.  Trump,  who  later  became 
a  subject  of  a  Department  of  Justice  (“DOJ”)  appointed  Special  Counsel’s  investigation 
into  that  sabotage. 

41.  Cambridge  Analytica’ s  unlawful  misappropriation  and  unlawful  use  of  FB  user 
information  was  one  of  many  plunders  and  unlawful  uses  of  FB  user’  information. 

42.  Since  approximately  2008,  without  the  knowledge  or  permission  of  their  users,  FB 
encouraged  and  allowed  numerous  third-parties  to  download  FB  user’  information;  other 
plunderers  were  not  FB  authorized. 
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43.  FB  also  traded  or  sold  unfettered  access  to  Plaintiffs  users’  information  to  numerous 
individuals,  businesses  and  governmental  agencies, 

44.  These  investigative  reporter  revelations  have  shown  that  FB  is  far  more  than  a  supplier 
purportedly  free  access  to  an  Internet-based  communications  platform.  FB  is  also  one  of 
the  world’s  largest  sellers  of  advertising  space,  an  information  brokerage  and  surveillance 
firm  and  derives  billions  in  annual  profits  from  these  activities. 

45.  FB,  having  recognized  that  its  users’  public  and  private  information  is  incredibly 
valuable,  set  about  collecting,  storing  and  supplementing  and  aggregating  that 
information  and  then  selling  and  trading  unfettered  access  to  that  information  to  it  to  its 
business  partners  and  numerous  other  third  parties. 

46.  If  FB  had  proceeded  lawfully,  instead  of  unlawfully  as  it  did,  as  a  seller  of  advertising 
space  and  an  information  brokerage  and  surveillance  firm,  it  would  have,  at  a  minimum, 
obtained  the  consent  of  it  users  to  sell  and  trade,  aggregate  and  supplement  its  users’ 
information,  but  FB  never  did. 

47.  It’s  likely  that  the  vast  majority  of  FB’s  billions  of  users  are  not  aware  of  how  FB  is 
exploiting  their  information  and  the  dangers  and  other  problems  that  they  may  encounter 
as  a  result  of  FB’s  exploitive  activities. 

48.  FB’s  deceptive,  willful,  reckless  and  unlawful  conduct  violated  the  contractual  promises 
and  public  pronouncements  that  it  would  protect  the  privacy  of  its  users’  information  and 
was  recently  fined  $  five  billion  by  the  Federal  Trade  Commission  (“FTC”)  for  such  user 
privacy  violations. 
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49.  To  encourage  prospective  users/communicators  to  join  and  engage  with  each  other  on  its 
Internet-based  communication  platform,  FB  misled  prospective  users  into  believing  that 
they  controlled  their  FB  user’  information  through  certain  privacy  settings  and  other  FB 
tools. 

50.  But,  contrary  to  FB’s  express  promises,  these  privacy  settings  and  other  tools  did  not 
prevent  access  by  numerous  third-parties. 

51.  FB  also  manipulated  FB  users’  default  privacy  settings.  In  April  2010,  FB  unilaterally 
changed  users’  default  “Profile  Privacy  Settings”  so  that  the  default  settings 
indiscriminately  shared  FB  user’  information  with  third  parties.  This  change  sparked  the 
concerns  of  privacy  advocates  and  ultimately  the  FTC. 

52.  Reasonably  believing  in  FB’s  user  information  privacy  promises  ,  Plaintiffs  shared  their 
FB  user’  information  and  messages  with  their  FB  “Friends.”  FB  “Friends”  are  persons 
and  entities  that  are  FB  users  that  have  agreed  to  communicate  with  Plaintiffs  on  the  FB 
platform. 

53.  The  comprehensiveness  of  the  FB  user’  information,  unavailable  to  traditional  sellers  of 
advertising  space,  is  what  makes  it  so  valuable  to  advertisers  and  others  who  wish  to 
personally  target  FB  users  with  their  messages  and  gives  FB  a  substantial  competitive 
edge  over  them. 

54.  It  is  the  atypical  way  that  FB  collects,  analyzes  and  deploys  FB  user’  information  that 
inflicts  a  novel  and  more  invasive  kind  of  harm  than  typical  information  breaches. 
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55.  FB’s  aggregation  of  its  users’  information  allows  third  parties  and  FB  to  make  that  FB 
user’  information  public  and/or  share  it  with  third  parties  and  connect  it  to  specific  users, 
by  name,  contrary  to  FB’s  explicit  pledge  not  to  sell  FB  user’  information  to  advertisers 
or  share  it  with  third  parties. 

56.  The  fundamental  segments  of  a  FB  users’  information  profile  are  pictures,  phone 
numbers,  email  addresses  and  the  kind  of  corroborating  personal  information  used  for 
passwords  and  security  questions  are  essential  ingredients  for  identity  theft  and  other 
malicious  online  activity. 

57.  Information  access  and  processing  experts  agree  that  this  aggregated  information  makes 
people  much  more  vulnerable  to  voter  fraud,  medical  fraud,  phishing,  and  other  identity- 
based  harms. 

58.  The  harm  is  not  limited  to  identity  theft.  The  ability  to  analyze  and  deanonymize  FB  user’ 
information  allows  third  parties  to  personally  and  psychologically  target  FB  users  with 
greater  precision,  a  technique  now  called  psychographic  marketing. 

59.  For  example,  Cambridge  Analytica  exploited  FB  users’  information  to  target  individual 
voters  with  content  tailored  to  their  predicted  psychological  proclivities. 

60.  FB  and  other  information  brokers  compile  dossiers  on  FB  users  based  on  this  aggregated 
content.  The  dossiers  make  assumptions  about  users’  health,  financial  risk,  employability 
and  other  factors 
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61 .  Information  brokers  like  FB  then  make  that  information  accessible  to  third  parties, 
including  advertisers,  hackers  and  political  subversives  to  target  people  based  on  analyses 
of  their  temperament  and  vulnerabilities. 

62.  FB  has  repeatedly  professed  remorse  for  willfully  violating  its  users’  privacy. 

63.  Following  entry  of  the  2012  FTC  “Consent  Decree,”  Zuckerberg  stated,  “...we’ve  made  a 
bunch  of  mistakes  [intentional  conduct  that  produced  many  billions  in  profit  for  FB].” 

64.  Zuckerberg  then  assured  FB  users  that  FB  was  committed  to  providing  its  users  with 
“complete  control  over  who  they  share  with  at  all  times.”  See  Zuckerberg’s  pledge  at, 

Our  Commitment  to  the  Facebook  Community,  FB  Newsroom  (Nov. 29, 2011), 

https  ://newsroom.fb.com/news/20 11/1 1  /our-commitment-to-the-facebookcommunity/. 

65.  Zuckerberg  added,  “This  means  we’re  making  a  clear  and  formal  long  term  commitment 
to  do  the  things  we’ve  always  tried  to  do  and  planned  to  keep  doing,  giving  you  [FB 
users]  tools  to  control  who  can  see  your  information  and  then  making  sure  only  those 
people  you  intend  can  see  it.” 

66.  Since  the  Cambridge  Analytica  FB  user’  information  plundering  scandal  was  exposed, 
Zuckerberg  has  continued  apologizing  for  FB’s  unlawful  activities,  usually  calling  that 
willful  and  for  profit  unlawful  activity  a  “mistake”  but  never  offering  FB  users  any 
redress  for  FB’s  unlawful  conduct. 

67.  For  example,  on  April  18,  2018,  Zuckerberg  admitted,  “We  didn't  focus  enough  on 
preventing  abuse  and  thinking  through  how  people  could  use  these  tools  to  do  harm  as 
well.  That  goes  for  fake  news,  foreign  interference  in  elections,  hate  speech,  in  addition 
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to  developers  and  information  privacy.  We  didn't  take  a  broad  enough  view  of  what  our 
responsibility  is,  and  that  was  a  huge  mistake.  It  was  my  mistake.” 

68.  The  time  for  pro  forma  apologies  by  FB  Defendants  has  long  since  passed. 

69.  Now,  only  judicial  process,  such  as  this  and  numerous  other  lawsuits,  can  redress  those 
injured  by  FB’s  malicious  and  reckless  unlawful  conduct. 

70.  Zimmerman  and  his  solely-owned  publishing  business  Uxor  Press  bring  this  action 
seeking  recovery  for  injuries  suffered  as  a  result  of  the  willful,  unconstitutional, 
conspiratorial,  reckless,  outrageous,  unlawful  and  possibly  treasonous  conduct  of  FB  and 
also  seeks  injunctive  relief  that  to  forestall  and  deter  FB  and  others  from  such  unlawful 
and  improper  conduct  in  the  future. 

7 1 .  On  March  8,  2019,  Senator  and  presidential  candidate  Elizabeth  Warren  proposed  breaking 
up  FB  as  has  FB’s  co-founder  Chris  Hughs  as  well  as  numerous  civil  lawsuits  foreign  and 
domestic  governmental  investigations  involving  FB’s  alleged  monopolistic  and  other 
unlawful  conduct,  including  FB’s  information-sharing-agreements  with  third  parties  and 
participation  in  the  sabotage  of  the  U.S.  2016  presidential  elections. 

72.  Only  a  few  days  after  Senator  Warren  unveiled  her  FB  breakup  proposal,  FB  pulled  her 
political  ads  from  its  platform,  to  a  far  lesser  degree,  the  very  same  sort  of  malicious,  First 
Amendment  defying  censorship  FB  Defendants  deployed  against  Plaintiffs. 

73.  In  ever-increasing  numbers,  consumers,  lawmakers,  regulatory  agencies  domestic  and 
foreign,  investors  and  private  citizens  the  world  over  are  increasingly  concerned  about  FB’s 
unlawful  use  of  its  monopoly  power. 
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74.  Complaints  against  FB  include  FB’s  failure  to  safeguard  FB  user’  information,  FB’s  failure 
to  protect  its  users  from,  among  other  things,  hate  speech,  terrorist  propaganda  and 
recruitment  activity,  child  abuse,  Russian  political  propaganda,  U.S.  election  sabotage,  all 
sorts  of  disinformation  and  live  footage  of  violent  acts. 

75.  FB  has  agreed  to  hand  over  the  identification  information  of  French  FB  users  suspected  of 
hate  speech  on  its  platform  to  French  judges  but  has  entirely  ignored  a  2012  “Consent 
Decree”  it  signed  with  the  FTC.  More  on  the  “Consent  Decree”  below. 

76.  Among  other  serious  unlawful  activities,  FB  willfully  breached  FB’s  contracts  and 
promises  with  Plaintiffs  by  permitting  third  parties  like  Cambridge  Analytica,  Russian 
intelligence  agents  and  operatives,  Robert  Mercer  and  the  Trump  Campaign  to  willfully 
exploit  FB’s  lax  to  non-existent  user  privacy  protections. 

77.  Contrary  to  FB’s  purported  mission  to  connect  the  entire  world,  FB  blocked  Plaintiffs 
business  and  personal  accounts  and  by  so  doing  violated  Zimmerman’s  First  Amendment 
right  to  publish  his  non-violent,  pro-democracy,  political  views  on  FB’s  platform  and 
market  his  political  and  non-political  books  on  FB’s  platform,  and  in  so  doing  knowingly, 
recklessly  and  unlawfully  violated  Zimmerman’s  free  speech  rights  and  his 
constitutionally-protected  right  to  participate  in  free  and  fair  elections  as  well  as  his  Fourth 
Amendment  privacy  rights  by  willfully  allowing  third-parties  to  access  his  FB  user 
information  without  seeking  Plaintiffs  authorization  and  without  his  knowledge. 

78.  As  late  as  July  2019,  a  FB  executive  in  charge  of  global  information  testifying  before 
Congress  couldnot  or  would  not  answer  a  congressman’ s  question  regarding  why  A1  Qaeda 
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is  still  allowed  to  recruit  terrorists  using  the  FB  platform. 

79.  The  constitutional  violations,  conspiratorial  and  other  tortious  and  criminal  conduct  of  FB 
includes: 

•  Direct  and  indirect  participation  in  a  racketeering  enterprise.  See  Count  Fifteen. 

•  Willful,  promised  and  repeated  failure  to  protect  and  not  make  available  to  third  parties 
Plaintiffs  user’  information  that  Plaintiffs  had  entrusted  to  it; 

•  Blocking  Plaintiffs  access  and  use  of  his  personal  and  business  accounts; 

•  Active  participation  in  the  sabotage  of  the  2016  U.S.  presidential  elections  by 
facilitating  the  Trump  Campaign’s  use  of  Plaintiffs  plundered  FB  user’  information  and 
communications  to  sabotage  of  the  2016  U.S.  presidential  elections,  primary  and  general. 

•  Failure  to  block  Cambridge  Analytica  from  the  theft  and  use  Plaintiffs’  FB  user’ 
information  and  that  of  nearly  a  hundred  million  other  FB  users’  information  to  help 
sabotage  the  2016  U.S.  presidential  elections. 

IV.  AN  UNREGULATED  FB  THEATENS  EVERYONE 

80.  Plaintiffs  repeat  and  re-allege  all  preceding  and  following  paragraphs  throughout  this 
Complaint  as  if  fully  set  forth  herein. 

81.  FB  and  one  man,  FB’s  CEO  Mark  Zuckerberg,  and  one  woman,  FB’s  COO  Sheryl 
Sandberg,  without  any  effective  checks  on  their  conduct,  have  amassed  monopolistic 
power  and  have  used  that  power  in  a  intentionally  deceptive,  reckless  and  unlawful  manner 
that  endangers  and  negatively  impacts  the  quality  of  the  life  and  constitutional  rights  of 
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Plaintiffs  and  billions  of  other  FB  users  and  non-users,  going  so  far  as  to  recently  propose 
the  creation  of  its  own  international  currency  that  would  be  based  in  Switzerland  and  could 
likely  threaten  the  stability  of  the  global  financial  system  and  markets  and  the  U.S. 
governments.,  as  well  as  many  others.  More  on  FB’s  proposed  currency  below. 

82.  FB  Defendants  have  played  the  principle  role  in  accelerating  the  transformation  of  America 
and  other  nations  from  the  age  of  information  to  the  age  of  disinformation,  a  transformation 
that  tears  at  the  very  fabric  of  the  democratic  ideals  envisioned  by  America’s  Founders. 

83.  Other  businesses  like  Fox  News  are  also  culpable,  but  none  of  them  has  anything  like  the 
global  reach  (billions  of  FB  users),  financial  and  technological  resources,  unregulated 
monopolistic  power,  and  seemingly  boundless  ambition  to  trample  on  our  rights  to  free 
speech,  free  and  fair  elections  and  our  right  to  privacy  as  does  FB. 

84.  FB  has  devised  rules  of  the  road  that  benefit  only  FB  at  the  expense  of  its  users’  privacy 
and  safety,  always  surveilling  its  users  and  treating  them  in  whatever  way  FB  deems  most 
advantageous  to  FB  unrestrained  by  any  ethical  norms  and  only  a  few,  and  mostly 
ineffective  government  imposed  rules  and  regulations. 

85.  The  former  head  of  FB’s  information  science  team  described  FB’s  user  tracking  and 
surveillance  to  a  microscope  that  allows  FB  to  examine  its  users’  social  behavior  with  a 
degree  of  intensity  never  previously  available  and  to  run  undetected  experiments  on  its 
billions  of  users  without  regard  to  their  privacy  and  safety  and  for  no  social  purpose 
whatsoever  other  than  advancing  FB’s  monopolistic  and  political  power. 
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86.  Another  member  of  the  information  science  team  said  “Anyone  on  [that]  team  could  run  a 
test.  They’re  always  trying  to  alter  people’s  behavior.” 

87.  As  FB  gains  greater  and  greater  monopolistic  market  reach  and  financial  and  political 
power  by,  among  other  things,  tracking  its  user’s  activities  and  shaping  the  news  its  users’ 
see,  the  threat  to  our  democracy  grows  ever  greater  as  occurred  when  FB  willfully 
participated  with  Russian  operatives,  the  Trump  Campaign,  Robert  Mercer,  Cambridge 
Analytica  and  others  in  the  sabotage  of  the  primary  and  general  2016  U.S.  presidential 
elections. 

88.  Shortly  after  FB  offered  a  small  portion  of  its  stock  to  the  public,  FB  amassed  over  a  billion 
dollars  in  profit  and  paid  no  income  tax,  actually  receiving  an  approximately  $400  million 
tax  deduction  and/or  refund  by  writing  off  the  value  of  the  stock  options  it  conferred  on 
certain  of  its  executives. 

89.  In  201 8,  FB  spent  over  $22  million  to  protect  Zuckerberg  from  harm  and  hardly  a  pittance, 
if  anything,  to  protect  Plaintiffs  and  billions  of  other  FB  users  and  non-users  that  it  was 
willfully  placing  in  danger. 

90.  The  many  dangers,  past,  present  and  future  FB  has  inflicted,  and  will  continue  to  inflict, 
on  its  users  and  non-users  are  many.  Even  so,  FB  has  effectively  established  itself  in  the 
everyday  life  of  millions  of  Americans,  which  provides  all  the  more  reason  for  this  Court 
to  act  to  thwart  the  very  real  dangers  and  other  perils  that  FB  users  and  non-users  face  from 
an  unregulated  FB. 
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91 .  In  sum,  among  many  perilous  and  otherwise  damaging  activities  the  virtually  an 
unregulated  FB  routinely  aids  and  abets  includes: 

•  Election  rigging; 

•  Terrorist  activity; 

•  Organized  immigration  crime. 

•  Slavery  trafficking. 

•  Extreme  and  revenge  pornography; 

•  Incitement  of  violence,  hate  crime,  harassment,  intimidation,  bullying,  trolling  and 

Cyberstalking; 

•  Sale  of  illegal  goods  and  services,  such  as  drugs  and  assault  weapons; 

•  Content  unlawfully  uploaded  to  and  from  prisons; 

•  Sexting  and  distributing  indecent  or  sexual  images  of  children  under  the  age  of  1 8; 

•  Children  accessing  pornography  and  other  inappropriate  material,  including  children 

under  13  using  dating  applications; 

•  Child  sexual  exploitation  and  abuse  by  pedophiles; 

•  Distribution  of  enemy  and  adversary  propaganda  and  disinformation; 

•  Advocacy  of  self-harm,  female  genital  mutilation  and  suicide. 

92.  As  late  as  July  2019,  FB,  Twitter,  Google  and  other  platforms  say  they  are  actively 
collaborating  to  fix  the  above-listed  problems. 

93.  These  multibillion  dollar  corporations  claim  they  have  formed  a  group  through  which  they 
are  actively  collaborating  to  remedy  the  above-listed  problems,  which  is  nothing  but  an 
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egregious  deception  as  the  so-called  group  has  no  budget,  no  assigned  full  time  employees 
and  no  physical  meeting  place,  no  discrete  short  or  long  term  measurable  or  even  non- 
measurable  specific  objectives  and  no  established  timeframe  for  accomplishing  anything. 

94.  The  U.S.  government,  much  like  it  did  when  it  failed  to  assert  the  dangers  of  smoking,  has 
entirely  failed  to  take  the  actions  necessary  to  protect  Americans  from  an  unregulated  FB. 

95.  Most  Americans  are  unaware  of  the  very  real  dangers  an  unregulated  FB  poses,  though 
some  Americans  were  successfully  recruited  by  A1  Qaeda’s  use  of  the  FB  platform.  See, 
Zucked:  Waking  Up  to  the  FB  Catastrophe,  (2019),  by  Roger  McNamee,  a  large  FB 
shareholder. 

96.  An  unregulated  FB,  among  other  nefarious  activities,  is  used  to  spread  hate  speech,  to  abuse 
and  bully  and  to  undermine  our  democratic  values  and  limit  legitimate  debate. 

97.  The  impact  of  unregulated  and  harmful  FB  messaging  is  particularly  damaging  for  children 
and  that  activity  is  widespread  on  FB. 

98.  In  201 8  there  were  over  18.4  million  referrals  of  child  sexual  abuse  material  to  the  National 
Center  for  Missing  and  Exploited  Children. 

99.  Child  sex  offenders  use  FB  to  view  and  share  child  sexual  abuse  material,  recruit  children 
for  sexual  abuse  and  broadcast  images  of  the  sexual  abuse  of  children. 

100.  The  prevalence  of  anti-democratic  propaganda  messaging  on  FB  threatens  our 
national  security  and  thus  the  physical  safety  of  every  American  and  is  obviously 
unacceptable. 
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101.  FB  is  used  by  terrorists  to  recruit  vulnerable  people  with  propaganda  designed  to 
radicalize  and  incite  violence  against  the  U.S.  and  elsewhere. 

102.  Terrorist  groups  also  use  FB  to  broadcast  live  terrorist  attacks. 

1 03.  Dangerous  opioids  are  marketed  and  sold  on  FB. 

104.  Hostile  actors  increasingly  use  FB  to  spread  disinformation  to  undermine  our 
democratic  values  the  rule  of  law. 

105.  FB  uses  sophisticated  algorithms  that  send  FB  users  to  ‘echo  chambers  or  ‘filter 
bubbles,  where  FB  users  are  presented  with  disinformation  instead  of  seeing  a  range  of 
voices  and  opinions.  This  ensures  that  FB  users  do  not  see  messaging  that  runs  contrary  to 
the  disinformation  FB  helps  broadcast  for  Russia  and  other  U.S.  adversaries. 

106.  Criminal  gangs  use  FB  to  promote  gang  culture  and  incite  violence.  This,  together 
with  the  illegal  sale  of  weapons  to  young  people  online,  is  a  contributing  factor  in  the 
dramatic  rise  of  lethal  gang  violence  on  America’s  streets. 

107.  FB  is  used  to  harass,  bully  or  intimidate  people  in  vulnerable  groups  or  in  public 
life.  The  President  prefers  Twitter  and  Fox  News. 

108.  FB  increasingly  exposes  young  adults  and  children  to  all  sorts  of  harmful  content 
that  serves  to  induce  violent  behavior,  self-loathing  and  harm  and  suicide. 

109.  FB  has  worked  strategically  to  maintain  its  monopolistic  policies  and  practices, 
which  include  willful  and  numerous  violations  of  constitutional  and  antitrust  law. 
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110.  Columbia  Law  School  professor  Tim  Wu  observes  in  his  book  The  Curse  of  Bigness 
has  said:  “To  think  of  monopolies  and  oligopolies  as  worrisome  only  if  they  charge  high 
prices  is  a  narrow  perspective.” 

111.  In  practice,  monopolistic  product  pricing  is  only  one  form  of  harm  that  giant 
corporations  like  FB  often  inflict. 

112.  FB’s  market  dominance  and  technical  knowhow  allows  FB  to  behave  in  dangerous 
ways. 

113.  Without  seeking  permission  from  its  users,  FB  collects  and  uses  for  its  own 
purposes  the  public  and  private  FB  user’  and  non-user’  personal  information  of  billions  of 
people,  and  businesses  and  governments,  including  Plaintiffs. 

114.  FB  then  uses  that  information  in  various  ways  to  increase  its  advertising  and  other 
revenue  intake  and  profitability,  including  selling  targeted  advertising,  selling  targeted 
product  and  life-style  research  and  selling  FB  user  information  and  its  technological 
expertise  to  aid  and  abet  the  rigging  of  political  elections. 

115.  FB  has  an  extensive  history  of  failures  to  protect  it  user’s  privacy. 

116.  For  example,  in  2007  FB  implemented  an  information  tracking  computer  program 
called  Beacon,  which  lifted  information  about  FB  user’ s  purchases  and  activities  from  other 
platforms  and  websites  and  then  posted  that  information  to  FB’s  “NewsFeed”  without 
obtaining  FB  user’  approval. 

117.  Weeks  after  Beacon’s  introduction,  FB  users  responded  by  signing  a  petition 
demanding  that  FB  stop  its  Beacon  activities,  citing  concerns  over  privacy. 
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118.  In  response,  FB  created  an  “opt-out”  from  the  service.  Zuckerberg  commented, 
“[w]e  simply  did  a  bad  job  with  this  release,  and  I  apologize...”  (one  of  numerous  FB 
Defendants’  admissions  against  interest.) 

119.  Nineteen  FB  users,  unsatisfied  with  FB’s  response  to  their  complaints,  sued  FB  for 
violations  of  various  state  and  federal  privacy  statutes,  and  sought  damages  and  a  variety 
of  equitable  remedies.  FB  settled  certain  of  these  lawsuits  for  $9.5  million. 

120.  The  terms  of  the  settlement  included  FB  agreeing  to  terminate  its  use  of  Beacon 
and  funding  a  new  charity  organization  called  the  Digital  Trust  Foundation  whose  mission 
was  to  “fund  and  sponsor  programs  designed  to  educate  users,  regulators  and  enterprises 
on  critical  issues  relating  to  protection  of  identity  and  information  online  through  user 
control,  and  the  protection  of  users  from  online  threats.” 

121.  Despite  agreeing  to  terminate  its  use  of  Beacon,  FB  ’  s  counsel  stated  that  nothing  in 
the  settlement  agreement  precluded  FB  from  reinstituting  FB’s  use  of  Beacon  after 
changing  its  name. 

122.  In  2008,  FB  introduced  Open  ID,  an  application  that  gave  FB  users  a  means  to  log 
on  to  other  websites  with  their  FB  credentials. 

123.  FB  also  made  its  “Like”  button  available  on  other  websites,  further  blurring  the 
lines  of  privacy  and  allowing  for  widespread  tracking  of  a  person’s  web  browsing  history, 
even  for  non-FB  users. 
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1 24.  One  year  after  FB  ’  s  launch  of  Open  ID,  FB  changed  its  default  settings  to  make  its 
user’s  profiles  public  by  default.  FB  users  objected.  Even  so,  but  it  took  FB  five  years  to 
restore  the  previous  default  settings. 

125.  In  December  2009,  without  warning  or  obtaining  their  users’  approval,  FB  changed 
its  platform  so  that  certain  information  that  its  users  had  designated  as  private  was  made 
readily  available  to  third  parties. 

126.  FB  represented  that  third  party  applications  installed  by  FB  users  would  have  access 
only  to  FB  user’  information  needed  to  operate,  when,  in  fact,  the  third  party  applications 
and  their  developers  could  access  most  FB  user’s  information. 

127.  FB  also  told  FB  users  they  could  restrict  the  sharing  of  their  FB  user’  information 
to  FB  “Friends  Only.”  However,  selecting  “Friends  Only”  did  not  prevent  FB  user’s 
information  from  being  accessed  by  third  parties.  See,  Lane  v.  FB  Inc.,  696  F.  3d  81 1  (9th 
Cir.  2012).  See  also  Transcript  of  Fairness  Hearing  dated  February  26,  2010  and  Lane  v. 
FB,  Inc.,  Civ.  No.  C  08-3845  (ND  Cal.)  After  FB  users  protested,  Zuckerberg  apologized 
for  what  he  called  his  “mistake”  and  promised  to  do  better. 

128.  Had  the  CEO  of  any  other  large  corporation  made  what  Zuckerberg  deemed  his 
“mistake,”  his  board  and  shareholders  would  have  fired  that  person.  But  Zuckerberg,  who 
owns  the  controlling  voting  shares  in  FB,  is  uncontrollable  by  FB  shareholders  or,  so  it 
seems  by  any  governmental  regulatory  agency,  the  FTC  excepted,  or  the  DOJ. 

129.  As  long  as  FB  had  rivals,  the  fear  of  losing  its  users  somewhat  restrained  FB’s 
behavior. 
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130.  But  as  FB’s  growth  has  surged,  FB,  following  in  the  footsteps  of  other  current  and 
previous  monopolies,  has  stepped  up  its  purchase  of  competitors,  and  with  competitive 
pressure  no  longer  a  FB  concern,  FB  has  deceptively,  recklessly  and  willfully  ignored  the 
privacy  promises  they  had  contracted  with  its  users  to  uphold  because  now  FB  users  have 
no  viable  alternative  to  FB. 

131.  In  ever  more  deceptive  ways,  FB  continues  to  violate  its  non-negotiable  privacy 
and  policy  practices. 

132.  FB  developed  plugin  algorithms  called  “Like”  and  “Share”  buttons  that  it  licenses 
to  website  owners.  The  licenses  require  third  party  website  owners  to  install  the  plugin 
algorithms  on  their  websites,  which  opens  a  pathway  of  communication  between  FB  user’s 
devices  and  FB’s  user’  information  repositories. 

133.  FB  had  promised  it  would  not  use  this  licensing  pathway  to  conduct  commercial 
surveillance  and  later  reneged  on  that  promise. 

134.  Having  taken  the  FB  licensing  pathway  promise  as  gospel,  CNN,  the  New  York 
Times,  the  Wall  Street  Journal,  Slate  and  ABC  were  among  the  first  companies  to  sign  up 
for  the  plugins. 

135.  However,  in  June  2014,  FB  publicly  reversed  course  by  announcing  it  would  use 
its  licensing  algorithm  plugins  as  installed  on  third  party  websites  to  surveil  consumer 
behavior. 

136.  By  then,  FB  ’  s  licensing  algorithm  was  installed  on  millions  of  websites  and  mobile 
applications  and  rapidly  spread  like  an  undetected,  highly  infectious,  plague. 
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137.  These  days,  all  a  person  has  to  do  is  visit  a  page  with  a  “Like”  button,  and  FB, 
without  authorization,  collects,  stores  and  aggregates  your  public  and  private  information, 
such  as  what  you’re  buying  or  what  you’re  reading  or  where  you’re  traveling. 

138.  FB’s  monopolistic  conduct  negatively  impacts  billions  of  people  and  businesses, 
including  Plaintiffs. 

139.  FB  uses  its  market  dominance  and  unlawfully  obtained  information  resources  to 
undercut  their  competitors  in  the  advertising  market  because  its  purloined  consumer 
information  allows  it  to  target  FB  users’  preferences  and  behavior  than  other  sellers  of 
advertising  can. 

140.  For  example,  the  New  York  Times  may  know  which  of  its  online  readers  have 
clicked  on  its  health-related  content.  But  FB  knows  which  Times  health-content  readers 
vacation  in  Florida,  shop  for  Nike  shoes  and  read  workout  blogs  because  its  widespread 
coding  gives  it  the  capability  to  track  people  all  over  the  Internet  and  connect  that  online 
activity  to  their  FB  user’  information  repositories. 

141 .  Thus,  the  Times  cannot  effectively  compete  with  FB’s  illicitly  gained  edge  in  the 
advertising  market.  Moreover,  the  Times  pays  most  its  content  producers,  while  FB  merely 
steals  the  information  that  it  needs. 

1 42 .  This  is  one  big  reason  why  newspapers  and  other  online  publishers  are  experiencing 
financial  difficulty.  While  FB  continues  racking  up  record  profits,  it  poses  an  ever- 
increasing  threat  to  our  fragile  democracy,  to  fair  competition,  to  privacy  and  free  speech, 
to  the  rule  of  law  and  to  free  and  fair  elections. 
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143.  One  powerful  remedy  to  FB’s  monopolistic  policies  and  practices  is  the  U.S. 
Sherman  Antitrust  Act  of  1890,  written  at  the  height  of  the  Gilded  Age  to  confront  the  out- 
of-control  growth  of  concentrated  power  in  business  and  the  anti-competitive  conduct  of 
monopolies. 

144.  FB  is  in  violation  of  the  Sherman  Antitrust  Act  because  it  has  harmed  countless 
millions  of  people  and  businesses  by  deploying  monopolistic  business  practices  and 
policies  to  restrict  competition  and  relentlessly  continues  to  expand  its  monopoly  market 
power  with  its  willfully  reckless,  deceptive  and  unlawful  conduct. 

145.  In  the  wake  of  increasingly  expressed  public  anger,  Zuckerberg  announced  a  new 
privacy  vision  for  FB,  a  willfully  deceptive,  self-serving  vision  that  entirely  fails  to  address 
any  of  FB’s  monopolistic  policies  and  practices. 

146.  Calls  for  holding  FB  accountable  for  its  unlawful  conduct  include  Senator  Elizabeth 
Warren  and  the  New  York  Time ’s  Kevin  Roose,  who  favor  breaking  up  FB. 

147.  Senator  Warren  also  called  for  reclassifying  FB  as  a  public  utility. 

148.  Meanwhile,  much  like  the  monopolists  of  the  Gilded  Age,  Zuckerberg  insists  that 
FB  is  only  interested  in  the  progress  of  civilization,  in  his  words  “bringing  the  world  closer 
together.” 

149.  Unfortunately,  what  unaccountable  monopolies  typically  do  is  tear  the  world  apart, 
not  closer  together  as  its  election  rigging  and  broadcast  of  hate  speech  shows. 

150.  Throughout  history,  unregulated  and  unaccountable  monopolies  like  FB  have 
produced  economic  inequality,  stifled  innovation  and  created  widespread  public  anger,  a 
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condition  that  has  enabled  anti-democratic  authoritarian  governments,  a  condition 
remarkably  similar  to  those  now  tearing  at  the  roots  of  America’s  already  fragile 
democracy. 

151.  Fortunately,  the  last  Gilded  Age  taught  us  something  about  how  to  control 
monopolists. 

152.  It  won’t  happen  under  President  Trump  and  the  Republican-dominated  Congress, 
but  certain  of  the  President’s  2020  challengers  are  making  breaking  up  monopolies  like  FB 
a  central  part  of  their  appeal  to  voters  and  before  that  our  judiciary  and  regulatory  agencies 
may  take  appropriate  action. 

153.  Historically,  the  American  electorate  voted  for  trustbusting,  anti-monopolists  like 
Theodore  Roosevelt  who  promised  to  and  did  enforce  the  Sherman  Antitrust  Act. 

154.  In  2018,  the  FTC  announced  a  prospective  large  fine  against  FB,  large  but  only 
chump  change  in  view  of  FB  ’  s  vast  financial  resources  and  its  willful  violations  of  the  20 1 2 
“Consent  Decree”  FB  signed  with  the  FTC  but  has  not  honored.  Following  are  the  2012 
FTC  Orders  FB  has  ignored: 


Part  I.  IT  IS  ORDERED  that  Respondent  and  its  representatives,  in  connection  with  any 
product  or  service,  in  or  affecting  commerce,  shall  not  misrepresent  in  any  manner,  expressly  or 
by  implication,  the  extent  to  which  it  maintains  the  privacy  or  security  of  covered  information, 
including,  but  not  limited  to: 

A.  its  collection  or  disclosure  of  any  covered  information; 

B.  the  extent  to  which  a  consumer  can  control  the  privacy  of  any  covered 
information  maintained  by  Respondent  and  the  steps  a  consumer  must  take  to 
implement  such  controls; 

C.  the  extent  to  which  Respondent  makes  or  has  made  covered  information 
accessible  to  third  parties; 

D.  the  steps  Respondent  takes  or  has  taken  to  verify  the  privacy  or  security 
protections  that  any  third  party  provides; 
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E.  the  extent  to  which  Respondent  makes  or  has  made  covered  information 
accessible  to  any  third  party  following  deletion  or  termination  of  a  user’s  account 
with  Respondent  or  during  such  time  as  a  user’s  account  is  deactivated  or 
suspended;  and 

F.  the  extent  to  which  Respondent  is  a  member  of,  adheres  to,  complies  with,  is 
certified  by,  is  endorsed  by,  or  otherwise  participates  in  any  privacy,  security,  or 
any  other  compliance  program  sponsored  by  the  government  or  any  third  party, 
including,  but  not  limited  to,  the  U.S.-EU  Safe  Harbor  Framework. 

Part  II.  IT  IS  FURTHER  ORDERED  that  Respondent  and  its  representatives,  in  connection 
with  any  product  or  service,  in  or  affecting  commerce,  prior  to  any  sharing  of  a  user’s 
nonpublic  user  information  by  Respondent  with  any  third  party,  which  materially  exceeds  the 
restrictions  imposed  by  a  user’s  privacy  setting(s),  shall: 

A.  clearly  and  prominently  disclose  to  the  user,  separate  and  apart  from  any  “privacy 
policy,”  “data  use  policy,”  “statement  of  rights  and  responsibilities”  page,  or  other 
similar  document:  (1)  the  categories  of  nonpublic  user  information  that  will  be 
disclosed  to  such  third  parties,  (2)  the  identity  or  specific  categories  of  such  third 
parties,  and  (3)  that  such  sharing  exceeds  the  restrictions  imposed  by  the  privacy 
setting(s)  in  effect  for  the  user;  and 

B.  obtain  the  user’s  affirmative  express  consent. 

Nothing  in  Part  II  will  (1)  limit  the  applicability  of  Part  I  of  this  order;  or  (2)  require  Respondent 
to  obtain  affirmative  express  consent  for  sharing  of  a  user’s  nonpublic  user  information  initiated 
by  another  user  authorized  to  access  such  information,  provided  that  such  sharing  does  not 
materially  exceed  the  restrictions  imposed  by  a  user’s  privacy  setting(s).  Respondent  may  seek 
modification  of  this  Part  pursuant  to  15  U.S.C.  §45(b)  and  16  C.F.R.  2.51(b)  to  address  relevant 
developments  that  affect  compliance  with  this  Part,  including,  but  not  limited  to,  technological 
changes  and  changes  in  methods  of  obtaining  affirmative  express  consent. 

Part  III.  IT  IS  FURTHER  ORDERED  that  Respondent  and  its  representatives,  in 
connection  with  any  product  or  service,  in  or  affecting  commerce,  shall,  no  later  than  sixty  (60) 
days  after  the  date  of  service  of  this  order,  implement  procedures  reasonably  designed  to  ensure 
that  covered  information  cannot  be  accessed  by  any  third  party  from  servers  under  Respondent’s 
control  after  a  reasonable  period  of  time,  not  to  exceed  thirty  (30)  days,  from  the  time  that  the 
user  has  deleted  such  information  or  deleted  or  terminated  his  or  her  account,  except  as  required 
by  law  or  where  necessary  to  protect  the  FB  website  or  its  users  from  fraud  or  illegal 
activity.  Nothing  in  this  paragraph  shall  be  construed  to  require  Respondent  to  restrict  unfettered 
access  to  any  copy  of  a  user’s  covered  information  that  has  been  posted  to  Respondent’s 
websites  or  services  by  a  user  other  than  the  user  who  deleted  such  information  or  deleted  or 
terminated  such  account. 

Part  IV.  IS  FURTHER  ORDERED  that  Respondent  shall,  no  later  than  the  date  of  service  of 
this  order,  establish  and  implement,  and  thereafter  maintain,  a  comprehensive  privacy  program 
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that  is  reasonably  designed  to  (1)  address  privacy  risks  related  to  the  development  and 
management  of  new  and  existing  products  and  services  for  consumers,  and  (2)  protect  the 
privacy  and  confidentiality  of  covered  information.  Such  program,  the 

implementation  of  which  must  be  documented  in  writing,  shall  contain  controls  and  procedures 
appropriate  to  Respondent’s  size  and  complexity,  the  nature  and  scope  of  Respondent’ s 
activities,  and  the  sensitivity  of  the  covered  information,  including: 

A.  the  designation  of  an  employee  or  employees  to  coordinate  and  be  responsible  for 
the  privacy  program. 

B.  the  identification  of  reasonably  foreseeable,  material  risks,  both  internal  and 
external,  that  could  result  in  Respondent’s  unauthorized  collection,  use,  or 
disclosure  of  covered  information  and  an  assessment  of  the  sufficiency  of  any 
safeguards  in  place  to  control  these  risks.  At  a  minimum,  this  privacy  risk 
assessment  should  include  consideration  of  risks  in  each  area  of  relevant 
operation,  including,  but  not  limited  to:  (1)  employee  training  and  management, 
including  training  on  the  requirements  of  this  order,  and  (2)  product  design, 
development,  and  research. 

C.  the  design  and  implementation  of  reasonable  controls  and  procedures  to  address 
the  risks  identified  through  the  privacy  risk  assessment,  and  regular  testing  or 
monitoring  of  the  effectiveness  of  those  controls  and  procedures. 

D.  the  development  and  use  of  reasonable  steps  to  select  and  retain  service  providers 
capable  of  appropriately  protecting  the  privacy  of  covered  information  they 

receive  from  Respondent  and  requiring  service  providers,  by  contract,  to  implement  and  maintain 
appropriate  privacy  protections  for  such  covered  information. 

E.  the  evaluation  and  adjustment  of  Respondent’s  privacy  program  in  light  of  the 
results  of  the  testing  and  monitoring  required  by  subpart  C,  any  material  changes 
to  Respondent’s  operations  or  business  arrangements,  or  any  other  circumstances 
that  Respondent  knows  or  has  reason  to  know  may  have  a  material  impact  on  the 
effectiveness  of  its  privacy  program. 

Part  V.  IT  IS  FURTHER  ORDERED  that,  in  connection  with  its  compliance  with  Part  IV  of 
this  order,  Respondent  shall  obtain  initial  and  biennial  assessments  and  reports  (“Assessments”) 
from  a  qualified,  objective,  independent  third  party  professional,  who  uses  procedures  and 
standards  generally  accepted  in  the  profession.  A  person  qualified  to  prepare  such  Assessments 
shall  have  a  minimum  of  three  (3)  years  of  experience  in  the  field  of  privacy  and  data  protection. 
All  persons  selected  to  conduct  such  Assessments  and  prepare  such  reports  shall  be  approved  by 
the  Associate  Director  for  Enforcement,  Bureau  of  Consumer  Protection,  Federal  Trade 
Commission,  Washington,  D.C.  20580,  in  his  or  her  sole  discretion.  Any  decision  not  to  approve 
a  person  selected  to  conduct  such  Assessments  shall  be  accompanied  by  a  writing  setting  forth  in 
detail  the  reasons  for  denying  such  approval.  The  reporting  period  for  the  Assessments  shall 
cover:  (1)  the  first  one  hundred  and  eighty  (180)  days  after  service  of  the  order  for  the  initial 
Assessment,  and  (2)  each  two  (2)  year  period  thereafter  for  twenty  (20)  years  after  service  of  the 
order  for  the  biennial  Assessments.  Each  Assessment  shall: 
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A.  set  forth  the  specific  privacy  controls  that  Respondent  has  implemented  and 
maintained  during  the  reporting  period; 

B.  explain  how  such  privacy  controls  are  appropriate  to  Respondent’s  size  and 
complexity,  the  nature  and  scope  of  Respondent’s  activities,  and  the  sensitivity  of 
the  covered  information; 

C.  explain  how  the  privacy  controls  that  have  been  implemented  meet  or  exceed  the 
protections  required  by  Part  IV  of  this  order;  and 

D.  certify  that  the  privacy  controls  are  operating  with  sufficient  effectiveness  to 
provide  reasonable  assurance  to  protect  the  privacy  of  covered  information  and 
that  the  controls  have  so  operated  throughout  the  reporting  period. 

Each  Assessment  shall  be  prepared  and  completed  within  sixty  (60)  days  after  the  end  of  the 
reporting  period  to  which  the  Assessment  applies.  Respondent  shall  provide  the  initial 
Assessment  to  the  Associate  Director  for  Enforcement,  Bureau  of  Consumer  Protection,  Federal 
Trade  Commission,  Washington,  D.C.  20580,  within  ten  (10)  days  after  the  Assessment  has  been 
prepared.  All  subsequent  biennial  Assessments  shall  be  retained  by  Respondent  until  the  order  is 
terminated  and  provided  to  the  Associate  Director  of  Enforcement  within  ten  (10)  days  of 
request. 

Part  VI.  IT  IS  FURTHER  ORDERED  that  Respondent  shall  maintain  and  upon  request  make 

available  to  the  Federal  Trade  Commission  for  inspection  and  copying,  a  print  or  electronic  copy 

of:  A.  for  a  period  of  three  (3)  years  from  the  date  of  preparation  or  dissemination, 

whichever  is  later,  all  widely  disseminated  statements  by  Respondent  or  its 

representatives  that  describe  the  extent  to  which  Respondent  maintains  and 

protects  the  privacy,  security,  and  confidentiality  of  any  covered  information, 

including,  but  not  limited  to,  any  statement  related  to  a  change  in  any  website  or 

service  controlled  by  Respondent  that  relates  to  the  privacy  of  such  information, 

along  with  all  materials  relied  upon  in  making  such  statements,  and  a  copy  of 

each  materially  different  privacy  setting  made  available  to  users; 

B.  for  a  period  of  six  (6)  months  from  the  date  received,  all  consumer  complaints 
directed  at  Respondent  or  forwarded  to  Respondent  by  a  third  party,  that  relate  to 
the  conduct  prohibited  by  this  order  and  any  responses  to  such  complaints; 

C.  for  a  period  of  five  (5)  years  from  the  date  received,  any  documents,  prepared  by 
or  on  behalf  of  Respondent,  that  contradict,  quality,  or  call  into  question 
Respondent’s  compliance  with  this  order; 

D.  for  a  period  of  three  (3)  years  from  the  date  of  preparation  or  dissemination, 
whichever  is  later,  each  materially  different  document  relating  to  Respondent’s 
attempt  to  obtain  the  consent  of  users  referred  to  in  Part  II  above,  along  with 
documents  and  information  sufficient  to  show  each  user’s  consent;  and  documents 
sufficient  to  demonstrate,  on  an  aggregate  basis,  the  number  of  users  for  whom 
each  such  privacy  setting  was  in  effect  at  any  time  Respondent  has  attempted  to 
obtain  and/or  been  required  to  obtain  such  consent;  and 

E.  for  a  period  of  three  (3)  years  after  the  date  of  preparation  of  each  Assessment 
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required  under  Part  V  of  this  order,  all  materials  relied  upon  to  prepare  the 
Assessment,  whether  prepared  by  or  on  behalf  of  Respondent,  including  but  not 
limited  to  all  plans,  reports,  studies,  reviews,  audits,  audit  trails,  policies,  training 
materials,  and  assessments,  for  the  compliance  period  covered  by  such 
Assessment. 

Part  VII.  IT  IS  FURTHER  ORDERED  that  Respondent  shall  deliver  a  copy  of  this  order  to  (1 
all  current  and  future  principals,  officers,  directors,  and  managers;  (2)  all  current  and  future 
employees,  agents,  and  representatives  having  supervisory  responsibilities  relating  to  the  subject 
matter  of  this  order,  and  (3)  any  business  entity  resulting  from  any  change  in  structure  set  forth  in 
Part  VIII.  Respondent  shall  deliver  this  order  to  such  current  personnel  within  thirty  (30)  days 
after  service  of  this  order,  and  to  such  future  personnel  within  thirty  (30)  days  after  the  person 
assumes  such  position  or  responsibilities.  For  any  business  entity  resulting  from  any  change  in 
structure  set  forth  in  Part  VIII,  delivery  shall  be  at  least  ten  (10)  days  prior  to  the  change  in 
structure. 

Part  VIII.  IT  IS  FURTHER  ORDERED  that  Respondent  shall  notify  the  Commission  within 
fourteen  (14)  days  of  any  change  in  Respondent  that  may  affect  compliance  obligations  arising 
under  this  order,  including,  but  not  limited  to,  a  dissolution,  assignment,  sale,  merger,  or  other 
action  that  would  result  in  the  emergence  of  a  successor  corporation;  the  creation  or  dissolution 
of  a  subsidiary,  parent,  or  affiliate  that  engages  in  any  acts  or  practices  subject  to  this  order;  the 
proposed  filing  of  a  bankruptcy  petition;  or  a  change  in  either  corporate  name  or  address.  Unless 
otherwise  directed  by  a  representative  of  the  Commission,  all  notices  required  by  this  Part  shall 
be  sent  by  overnight  courier  (not  the  U.S.  Postal  Service)  to  the  Associate  Director  of 
Enforcement,  Bureau  of  Consumer  Protection,  Federal  Trade  Commission,  600  Pennsylvania 
Avenue  NW,  Washington,  D.C.  20580,  with  the  subject  line  In  the  Matter  ofFB,  Inc., 

FTC  File  No.[  ].  Provided,  however,  that  in  lieu  of  overnight  courier,  notices  may  be  sent  by 
first-class  mail,  but  only  if  an  electronic  version  of  any  such  notice  is  contemporaneously  sent  to 
the  Commission  at  Debrief@ftc.gov. 

Part  IX.  IT  IS  FURTHER  ORDERED  that  Respondent,  within  ninety  (90)  days  after  the  date 
of  service  of  this  order,  shall  file  with  the  Commission  a  true  and  accurate  report,  in  writing, 
setting  forth  in  detail  the  manner  and  form  of  their  own  compliance  with  this  order.  Within  ten 
(10)  days  of  receipt  of  written  notice  from  a  representative  of  the  Commission,  Respondent  shall 
submit  additional  true  and  accurate  written  reports. 


V.  REPRESENTATIVE  FOREIGN  AND  DOMESTIC  GOVERNMENTAL 

INVESTIGATIONS  INTO  FB’S  USE  AND  ABUSE  OF  THE  INFORMATION 
FB  HAS  COLLECTED  FROM  ITS  USERS  AND  NON-USERS 

155.  Plaintiffs  repeat  and  re-allege  all  preceding  and  following  paragraphs  throughout 
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this  Complaint  as  if  fully  set  forth  herein. 

1 56.  Upon  receiving  a  number  of  complaints,  the  FTC  investigated  FB’ s  privacy 
practices  in  201 1  which  resulted  in  a  consent  decree  barring  FB  from  making  any  further 
deceptive  privacy  claims  and  required  FB  to  obtain  approval  of  the  FB  user’  before  it 
changed  the  way  FB  shared  its  user’s  information  and  required  that  FB  undergo  periodic 
assessments  of  its  privacy  practices  by  independent,  third  party  auditors  for  20  years. 

157.  In  another  of  many  admissions  against  interest  and  in  response  to  the  “Consent 
Decree”  FB  signed  with  the  FTC  in  2012,  Zuckerberg  stated,  “I’m  the  first  to  admit  that 
we’ve  made  a  bunch  of  mistakes  . . .” 

158.  On  March  1 1,  201 1,  FB  users  sued  FB  for  allowing  advertisers  on  its  platform 
unfettered  access  to  the  names,  photographs,  likenesses  and  identities  of  its  users  so  that 
they  could  advertise  all  sorts  of  goods  and  services  without  the  consent  of  their  users. 
This  lawsuit  involved  a  FB  feature  called  “Sponsored  Stories,”  which  essentially  turned 
FB  user’s  activity  into  an  endorsed  advertisement  on  their  “Friends”  pages,  a  feature  of 
which  FB’s  users  were  unable  to  opt-out  of. 

159.  A  $20  million  settlement  was  reached  in  this  matter  on  May  10,  2012,  in  which 
FB  agreed  to  revise  its  “Terms  of  Use”  and  parental  controls,  establish  a  settlement  fund 
for  authorized  claimants  to  receive  restitution  and  allocate  additional  funds  to  various 
charities.  See  FB,  Inc.,  Docket  No.  C-4365  (FTC  July  27,  2012)  available  at 
https://www.ftc.gov/sites/default/files/documents/cases/2012/08/120810FBdo.pdf.  See 
also  FB,  Analysis  of  Proposed  Consent  Order  to  Aid  Public  Comment,  FTC,  Dec.  5,  201 1 
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and  Irina  Ivanova,  FB ’s  Past  Failures,  MSN  Money,  Mar.  22,  2018  University  of 
Cambridge  Psychometrics  Center.  See  also  Complaint  at  Fraley  v.  FB,  Inc.,  Case  No.  11- 
CV-196193,  Cal.  Super.  Ct.  Mar.  11, 2011. 

160.  On  August  201 1,  FB  user’  Max  Schrems,  a  German  privacy  rights  lawyer,  filed  a 
Complaint  against  FB  Ireland  (FB’s  Irish  subsidiary  and  the  location  of  its  European 
headquarters)  with  the  Irish-based  Office  of  the  Data  Protection  Commissioner 
(“ODPC”)  concerning  the  access  and  use  of  FB  user’s  information  by  developers  of  third 
party  applications  which  constituted  a  tremendous  threat  to  FB  user’  information. 
Schrems  alleged  that  FB  Ireland  had  no  way  “to  ensure  compliance  with  the  limited 
contractual  measures”  it  imposed  on  developers.  While  FB  purportedly  requires  third 
party  applications  to  have  a  privacy  policy,  not  all  third  party  applications  have  one. 
When  a  FB  user  connects  to  an  application  that  does  not  have  a  privacy  policy,  FB  hides 
the  link  to  the  privacy  policy,  instead  of  warning  the  FB  user  that  there  is  no  privacy 
policy. 

161 .  Asa  result  of  Schrem’s  Complaint,  the  ODPC  investigated  and  issued  a  “ Report 
of  Re-AudiF  on  September  21,  2012,  which  noted  that  FB  Ireland  had  failed  to  adopt 
complete  protection  of  FB  user’  information. 

162.  Specifically,  the  ODPC  recommended  to  FB  Ireland  that:  FB  users  must  be 
informed  to  make  a  fully  informed  decision  when  granting  unfettered  access  to  third 
party  applications;  it  must  be  made  easier  for  FB  users  to  understand  that  their  activation 
and  use  of  an  application  will  be  visible  to  their  FB  “Friends”  as  a  default  setting;  it 

35 


Complaint 


Case# 


Case  3:19-cv-04591-SK  Document  1  Filed  08/07/19  Page  37  of  91 


should  be  made  easier  for  FB  users  to  make  informed  choices  about  what  applications 
installed  by  “Friends”  can  access  information  about  them.  See  Amended  Settlement 
Agreement  and  Release,  Fraley  v.  FB,  Inc.,  (Oct.  5,  2012)  available  at 
https://www.scribd.com/document/120980082/Fraley-v-FB-Amended-  Settlement- 
Agreement-201 2-1 0-05. 

163.  This  compromise  of  FB  user’  information  also  revealed  that  FB  had  been 
merging  user’s  information  with  information  submitted  by  their  contacts  in  order  to 
create  fuller  profiles  of  its  users.  Essentially,  information  of  non-  FB  users  whose 
information  may  have  been  uploaded  by  “Friends”  of  FB  users  was  being  collected  by  FB 
and  was  also  exposed  to  third  parties. 

164.  On  December  30,  2013,  FB  users  filed  a  lawsuit  against  FB  for  scanning  the 
content  of  their  messages  without  consent  for  use  in  honing  its  advertisements  in 
violation  of  the  Electronic  Communications  Privacy  Act  and  California’s  Invasion  of 
Privacy  Act. 

165.  A  non-monetary  settlement  agreement  was  reached  in  April  2017  in  which  FB 
enacted  a  number  of  changes  to  its  ability  to  monitor  and  use  its  user’s  communications 
for  advertisement  purposes  as  well  as  changes  to  its  help  center  and  overarching  Data 
Policies.  See  FB  Ireland  Ltd.,  Report  of  Re-Audit,  Data  Protection  Commissioner,  Sept. 
21, 2012. and  Irina  Ivanova,  FB ’s  past  failures,  MSN  Money,  Mar.  22,  2018. 

166.  On  September  1 1,  2017,  the  Spanish  Agency  for  Data  Protection  (“AEPD”) 
announced  that  it  had  fined  FB  €1 .2  million  for  violating  information  protection 
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regulations  following  its  investigation  to  determine  whether  the  processing  carried  out  by 
FB  complied  with  the  information  protection  regulations. 

167.  The  AEPD  stated  that  its  investigation  verified  that  FB  failed  to  inform  users  in  a 
comprehensive  and  clear  way  about  the  information  that  it  collects  or  about  how  such 
information  is  subsequently  treated,  in  particular,  the  AEPD  found  that  FB  collects 
information  derived  from  its  user’s  communications  with  third  party  sites  without 
informing  them  that  FB  collects  such  information  or  for  what  purposes  it  will  later  be 
used  or  disseminated. 

168.  The  AEPD  also  found  that  FB’s  “Privacy  Policy”  contains  generic  and  ambiguous 
language  and  requires  clicking  through  a  multitude  of  different  links  to  view  it  in  full. 
Further,  the  AEPD  concluded  that  FB  makes  an  inaccurate  reference  to  the  way  it  uses 
the  information  it  collects,  so  even  FB  users  with  an  average  knowledge  of  new 
technologies  would  not  become  aware  of  FB’s  information  collection,  storage, 
aggregation  or  use  policies. 

169.  In  May  2017,  the  French  information  protection  authority  fined  FB  its  maximum 
allowable  fine  of  €150,000  for  violations  similar  to  those  claimed  by  the  Spanish 
authorities.  The  Commission  Nationale  de  ‘Informatique  et  des  Libertes  complained  that 
FB  “. .  .proceeded  to  a  massive  compilation  of  personal  user  information  of  Internet  users 
in  order  to  display  targeted  advertising”  and  “it  has  also  been  noticed  that  FB  collected 
information  on  the  browsing  activity  of  Internet  users  on  third  party  websites  without 
their  knowledge.”  See  Transcript  of  Zuckerberg’s  U.S.  Senate  hearing.  See  also  the 
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Washington  Post,  Apr.  10,  2018  and  Matthew  Rosenberg,  Nicholas  Confessore,  and 
Carole  Cadwalladr,  How  the  Trump  Consultants  Exploited  the  FB  Data  of  Millions,  the 
New  York  Times,  Mar.  17,  2018;  and  Parrny  Olson,  Face-To-Face  with  Cambridge 
Analytica ’s  Elusive  Alexander  Nix,  Forbes  magazine,  Mar.20,  2018;  and  David  Meyer, 
Here’s  Why  FB  Got  a  $1.4  Million  Privacy  Fine  in  Spain,  Fortune,  September  11,  2017. 

1 70.  Six4Three  the  developer  of  a  computer  application  called  Pikinis,  filed  a  lawsuit 
against  FB,  further  undermining  FB’s  repeated  assertion  that  it  has  always  prioritized  its 
user’s  privacy.  Pikinis  was  shut  down  approximately  four  years  ago  after  FB  blocked  its 
third  party  unfettered  access  to  a  back-door  channel  to  FB’s  user’s  “Friends”  FB 
information. 

171.  In  their  lawsuit,  Six4Three  claimed  that  FB  engaged  in  “an  anti-competitive  bait- 
and-switch  scheme”  that  duped  Six4Three,  and  thousands  of  other  application  developers 
into  making  hefty  investments  to  build  applications,  only  to  later  decide  it  would  be  in 
FB’s  best  interest  to  no  longer  allow  so  many  application  developers  unfettered  access  to 
its  user’s  information  and  proceeded  to  block  such  access. 

1 72.  While  FB  has  denied  any  wrongdoing  in  the  Six4Three  lawsuit,  its  blocking 
access  action  confirms  that  FB  has  always  had  the  ability  to  change  its  access  practices 
with  respect  to  application  developers,  device  manufacturers  and  others  third  parties 
accessing  FB  user’s  information,  instead  opting  not  to  when  it  opted  to  aid  and  abet  the 
Trump  Campaign,  Robert  Mercer,  Cambridge  Analytica  Russian  operatives  and  others  to 
sabotage  the  2016  U.S  presidential  elections. 
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173.  In  20 1 4,  even  after  FB  changed  certain  of  its  third  party  access  policies  to  FB  ’  s 
users’  information,  FB  took  a  full  year  before  ending  third  party  application  developer 
access,  far  more  than  enough  time  for  application  developers  to  plunder  every  FB  user’s 
information. 

174.  FB  also  failed  to  follow  up  on  suspicious  activity  when  security  protocols  were 
triggered,  as  noted  by  whistleblower  Christopher  Wylie.  See  Alex  Hem  and  Jim 
Waterson,  FB  in  public  relations  crisis  mode  over  Cambridge  Analytica  scandal  in  the 
Guardian,  Apr.  24,  2018. 

175.  FB’s  failure  to  detect  and  prevent  the  plunders  of  its  user’s  information  by 
Cambridge  Analytica  and  other  third  parties  or  to  adequately  respond  with  proper 
notification  and  disclosures  to  FB  users  in  accordance  with  best  practices  and  applicable 
laws,  belies  any  claim  that  FB’s  monitoring  practices  and  internal  information  security 
and  privacy  policies  were  in  any  way  sufficient. 

1 76.  Clearly,  FB’s  user  privacy  protection  policies,  practices  and  procedures  were 
willfully  woefully  inadequate  because  FB  knew  of  the  inadequacies  since  at  least  2010 
and  did  little  of  consequence  to  correct  them. 

177.  FB  violated  the  privacy  of-hundreds-millions  of  American  citizens,  including 
Zimmerman’s,  and  the  negative  impact  of  FB’s  failure  to  protect  its  user’s  privacy  and 
FB’s  willful  spread  of  Russian  anti-American  political  propaganda  for  profit  unless 
corrected  is  likely  to  continue  far  into  the  future  and  thus  compound  the  suffering  and 
damage  FB  has  already  inflicted  on  Plaintiffs  and  countless  others. 
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178.  A  second  FTC  investigation  of  FB  centers  on  whether  FB  violated  a  2012  Consent 
Decree  with  that  agency  that  required,  among  many  other  things,  FB  to  receive  explicit 
permission  from  users  before  it  shared  their  personal  information.  FB  gave  broad  unfettered 
access  to  its  user’s  information  to  at  least  60  companies  with  which  it  had  information¬ 
sharing  agreements. 

179.  Prosecutors  from  the  U.S.  attorney’s  office  for  the  Eastern  District  of  New  York 
have  been  conducting  a  criminal  investigation  of  FB,  with  a  grand  jury  subpoenaing 
records  from  at  least  two  smartphone  manufacturers  that  had  partnered  with  FB  and  who 
FB  had  allowed  to  access  personal  information  from  hundreds  of  millions  of  FB  users. 

180.  The  U.S.  Department  of  Housing  and  Urban  Development  (“HUD”)  filed  a  civil 
complaint  against  FB,  charging  FB  with  discrimination  in  its  advertising  practices  for 
housing.  HUD  is  seeking  damages  for  anyone  harmed  by  FB’s  targeted  advertising 
policies.  A  senior  HUD  official  told  CNBC  it  expects  that  millions  of  users  may  have  been 
affected  by  the  allegedly  discriminatory  policies  based  on  the  scale  of  FB’s  platform. 

181.  FB  has  since  changed  its  advertising  system  to  no  longer  allow  employers  and 
landlords  to  limit  their  targeted  audience  by  race,  ethnicity  or  gender  and  it  recently  settled 
a  lawsuit  over  the  practice. 

182.  The  European  Union’s  information  protection  watchdog  group  has  launched 
multiple  investigations  into  FB’s  privacy  practices. 

183.  Ireland’s  Data  Protection  Commission  released  a  report  that  disclosed  fifteen 
ongoing  investigations  of  major  tech  firms  as  of  the  end  of  2018. 

40 


Complaint 


Case  # 


Case  3:19-cv-04591-SK  Document  1  Filed  08/07/19  Page  42  of  91 


184.  Of  those  investigations,  10  were  focused  on  the  way  FB ’s  user’  information  is  used 
by  FB  and  included  FB-owned  Instagram  and  WhatsApp.  The  investigations  largely 
centered  around  whether  FB  or  its  subsidiaries  violated  the  European  Union’ s  General  Data 
Protection  Regulation  (“GDPR”). 

185.  FB  was  scheduled  to  appear  in  front  of  an  appeals  court  in  Brussels  for  a  two-day 
hearing  to  challenge  a  2018  court  order,  which  said  it  must  stop  tracking  users  and  non¬ 
users  without  their  consent.  In  a  press  release  published  prior  to  the  hearing,  the  Data 
Protection  Authority  said  that  it  stands  by  the  court’s  initial  ruling  and  believes  “that  FB 
should  be  ordered  to  respect  Belgian  and  European  privacy  rules  when  it  processes  personal 
information  through  its  cookies,  social  plug-ins  and  pixels.” 

186.  FB  has  appealed  a  ruling  from  Germany’s  Federal  Cartel  Office  that  called  into 
question  FB’s  business  model  and  said  it  “overstepped”  the  boundaries  of  GDPR, 
especially  in  light  of  what  it  called  “FB’s  dominant  position”  in  the  market.  “There  is  no 
effective  consent  to  the  [FB]  user’s  information  being  collected  if  their  consent  is  a 
prerequisite  for  using  the  FB.com  service  in  the  first  place,”  the  case  summary  stated. 

187.  FB  defied  a  summons  and  did  not  attend  a  hearing  at  the  Canadian  Parliament. 
Lawmakers  from  10  countries,  including  the  U.K.  and  Australia,  are  scheduled  to  attend 
the  meeting.  "Collectively  we  represent  about  450  million  people,  it's  a  bigger  population 
group  than  the  U.S.,"  Bob  Zimmer,  the  chairman  of  the  Canadian  parliamentary  committee 
hosting  the  international  meeting,  told  CNN. 
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188.  Zimmer  said  he  wanted  to  hear  from  FB's  top  two  executives  [Zuckerberg  and 
Sandberg]  who  had  opted  out,  not  their  replacements.  "Knowing  the  structure  of  FB  and 
how  it  is  micro-managed  right  from  the  top,  any  change  on  the  platform  is  done  through 
Mr.  Zuckerberg  or  through  Ms.  Sandberg." 

1 89.  "It's  not  that  hard  to  jump  on  a  plane  and  make  some  time  to  hear  from  legislators 
and  answer  their  questions,"  Zimmer  told  CNN.  Zimmer  added  that  the  decision  to  hold 
the  two  in  contempt  would  be  voted  on  by  the  whole  of  Parliament.  "Nobody  is  going  to 
come  with  some  handcuffs  and  arrest  them,  but  to  be  held  in  contempt  by  an  entire  country 
would  not  serve  any  platform  well,"  he  added. 

VI.  FB’  CONSPIRATORIAL  CONDUCT  AND  ADMISSIONS  REGARDING 
THEIR  ROLE  IN  THE  SABOTAGE  OF  THE  2016  U.S.  PRESIDENTIAL 
ELECTION  CYCLE 

190.  Plaintiffs  repeat  and  re-allege  all  preceding  and  following  paragraphs  as  if  fully  set 
forth  herein. 

191.  Zuckerberg  has  admitted  over  and  over  again  that  FB  user’s  information  was 
repeatedly  plundered  by  third  parties  and  others. 

192.  But  these  admissions  came  only  after  the  FB  user’  information  plunders  and  other 
FB  election  compromises  were  reported  in  the  media  and  led  to  the  public  outrage  that 
induced  several  congressional  inquiries  into  FB’s  involvement  in  the  sabotage  of  the  2016 
U.S.  presidential  elections  and  other  unlawful  conduct. 
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193.  Zuckerberg  paved  the  way  for  the  sabotage  of  the  2016  U.S.  presidential  elections 
when  on  October  1,  2012  Z  he  met  with  Russian  Prime  Minister  Dmitry  Medvedev  in 
Moscow  and  can  be  seen  in  a  photo  with  the  Russian  Prime  Minister  glad-handing  and 
smiling  profusely  as  he  hands  Medvedev  a  T-shirt  inscribed  on  the  front 
www.FB.com/DmitryMedvedev.  It’s  possible  Zuckerberg  was  compromised  before  he 
dropped  out  of  college  or  shortly  thereafter. 

194.  Zuckerberg  who  willingly  travelled  to  Moscow,  declined  to  travel  to  England  to 
answer  charges  being  contemplated  against  FB  being  brought  by  the  British  government. 
Surely  the  Medvedev  meeting  involved  more  than  a  T-shirt. 

195.  Zuckerberg  willfully  lied  over  and  over  again  when  he  publicly  declared  that  “The 
security  of  [FB  users]  privacy  allows  FB  users  to  freely  engage  and  share  their  feel  free  to 
connect  because  they  know  that  their  privacy  is  going  to  be  protected.”  See, 
https://www.cnbc.com/2018/04/03/zuckerberg-on-FB-and-privacy-before-cambridge- 
analytica-scandal  .html. 

196.  However,  long  before  and  contrary  to  Zuckerberg’ s  self-serving  public 
pronouncements  regarding  FB  user’  contentedness  with  FB  user’  information  privacy 
protections,  FB  launched  a  multifaceted  strategy  that  willfully,  recklessly  and  dangerously 
violated  its  user’s  right  to  privacy. 

197.  Never  before  has  any  U.S.  company  exploited  its  customer’s  stored  information  for 
profit  and  market  power  or  actively  engaged  in  the  cyber-sabotage  of  U.S.  elections  as  did 
FB.  See  Trump  Consultants  Exploited  the  FB  Information  of  Millions,  New  York  Times 
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(Mar.  17,  2018)  See  also,  Carole  Cadwalladr,  ‘I  Made  Steve  Bannon’s  Psychological 
Warfare  Tool’:  Meet  the  Information  War  Whistleblower,  the  Guardian  (Mar.  18,  2018). 

198.  In  the  wake  of  the  media’s  public  disclosure  of  FB’s  willful  FB  user  privacy 
protection  deceptions,  Zuckerberg  admitted:  “[I]t’s  clear  now  that  we  didn’t  do  enough. 
We  didn’t  focus  enough  on  preventing  abuse  and  thinking  through  how  people  could  use 
these  tools  to  do  harm  as  well.  That  goes  for  fake  news,  foreign  interference  in  elections, 
hate  speech,  in  addition  to  developers  and  information  privacy.  We  didn’t  take  a  broad 
enough  view  of  what  our  responsibility  is,  and  that  was  a  huge  mistake.  It  was  my  mistake.” 

199.  Zuckerberg’s  admission  that  FB’s  role  in  the  sabotage  or  the  2016  U.S.  presidential 
elections  was  “my  mistake”  is  an  outrageous  euphemism. 

200.  There  was  no  mere  Zuckerberg  “mistake.” 

201.  Instead  and  conversely,  FB  aggressively  sought  the  advertising  dollars  of  anti¬ 
democratic  advertisers  and  hate  mongers,  including  those  of  Russian  operatives,  the  Trump 
Campaign,  Robert  Mercer  and  numerous  others  and  they  were  well  aware  that  its  FB  user’ s 
information  was  not  only  plunderage  but  also,  at  their  direction  and  consent,  had  been 
made  widely  available  by  FB  to  an  assortment  of  third  parties,  certain  of  which  sought  to 
undermine  America’s  democratic  institutions,  free  and  fair  elections,  constitutional 
protections,  free  and  fair  markets  and  much,  much  more. 

202.  Before,  during  and  after  the  President  assumed  the  Office  of  the  Presidency,  the 
Trump  Campaign  conspired  with  and  paid  FB  millions  of  dollars  to  spread  lies, 
disinformation  and  misinformation  to  influence  FB  users  and  others  to  vote  for  Trump,  to 
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promote  white  supremacy,  to  coverup  Russia’s  role  in  the  sabotage  of  the  2016  U.S. 
presidential  elections,  to  divide  America’s  electorate,  to  disparage  Trump’s  political 
opponents,  to  denounce  the  judiciary  and  humiliate  persons  opposed  to  the  Trump 
candidacy  and  to  demean  and  cheapen  the  institutional  pillars  of  America’s  democracy. 

203.  While  Zuckerberg  has  commented  that  FB  was  as  surprised  as  anyone  by  the 
mammoth  2014  FB  user’  information  plunder,  in  fact  FB  actually  encouraged  the 
plundering  by  allowing  numerous  third  parties  unfettered  access  to  its  user  information 
repositories  and  its  willfully  lax  approach  to  protecting  the  privacy  of  its  user’s 
information. 

204.  A  2011  FTC  Complaint  specifically  references  FB  allowing  third  party  unfettered 
access  to  FB  user’  information  and  convinced  FB  to  sign  a  multi-count  “Consent  Decree” 
to  correct  its  deceptive  privacy  protection  ,  which  FB  has,  for  the  most  part,  willfully  and 
recklessly  ignored. 

205.  During  his  testimony  before  the  Senate  Commerce  and  Judiciary  Committees  on 
April  10,  2018  and  testimony  before  the  House  Energy  and  Commerce  Committee  on  April 
11,  2018,  Zuckerberg  admitted  that  “[FB]  didn’t  take  a  broad  enough  view  of  [its] 
responsibility  [on  information  privacy]  stating:  “It  was  my  mistake.  And  I’m  sorry.  I 
started  FB,  I  run  it,  and  I’m  responsible  for  what  happens  here.” 

206.  Zuckerberg  committed  to  improve  his  company’s  security,  including  the  basic 
responsibility  of  protecting  the  privacy  of  FB  user’  information,  which  he  entirely  and 
willfully  failed  to  do. 
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207.  In  2018,  Senator  Amy  Klobuchar  (D-Minn.)  made  it  clear  to  Zuckerberg  that 
Congress  disapproves  of  FB’s  current  privacy  efforts.  She  stated:  “I  think  we  all  agree  that 
what  happened  here  was  bad.  You  acknowledged  it  was  a  breach  of  trust.  And  the  way  I 
explain  it  to  my  constituents  is  that  if  someone  breaks  into  my  apartment  with  the  crowbar 
and  they  take  my  stuff,  it’s  just  like  if  the  manager  gave  them  the  keys  or  if  they  didn’t 
have  any  locks  on  the  doors,  it’s  still  a  breach;  it’s  still  a  break  in.”  Todd  Shields  and 
Vonnie  Quinn,  FB  Could  Be  Fined  Millions  for  Violating  Consent  Deal,  Bloomberg  News. 
Mar.  29,  2018. 

208.  Similarly,  Senator  Catherine  Cortez  Masto  questioned  Zuckerberg  on  FB’s  privacy 
policies  and  on  whether  FB  had  violated  the  2012  FTC  “Consent  Decree.” 

209.  There  are  eight  counts  of  deceptive  acts  and  practices  in  the  November  2012  FTC 
“Consent  Decree”  that  bar  FB  from,  among  other  things,  any  further  deceptive  privacy 
claims. 

210.  And,  most  importantly,  the  FTC  “Consent  Decree”  required  FB  to  give  its  users 
clear  and  conspicuous  notice  and  to  obtain  affirmative  express  consent  before  sharing  their 
information  with  third  parties. 

211.  Senator  Cortez  asked  Zuckerberg,  “That  was  part  of  the  FTC  “Consent  Decree,” 
correct?” 

212.  Zuckerberg  answered:  ”  Senator,  that  sounds  right  to  me.” 
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213.  Continuing  through  his  testimony  before  the  U.S .  Senate,  Zuckerberg  also  admitted 
that  FB  made  a  mistake  in  not  following  up  with  Cambridge  Analytica  in  2015  to  ensure 
the  FB  user’  information  they  plundered  from  FB  was,  in  fact,  deleted. 

214.  Zuckerberg  also  stated  that  he  “clearly  viewed  it  as  a  mistake  that  we  didn’t  inform 
people”  about  the  misappropriation  of  their  information  at  that  time,  and  also  did  not  notify 
the  FTC  in  2015,  despite  the  2012  “Consent  Decree”  to  do  so. 

215.  Despite  FB ’s  lengthy  and  oft  repeated  privacy  protection  promises  and  a  still  active 
FTC  2012  “Consent  Decree”  setting  forth  a  number  of  FB  information  security  obligations, 
FB  failed  to  prevent  the  aggregation  of  the  information  of  millions  of  its  users,  thereby 
exposing  those  users  to  potential  unauthorized  use  of  their  information  in  the  future.  See 
FTC  press  release,  “Statement  by  the  Acting  Director  of  FTC’s  Bureau  of  Consumer 
Protection  Regarding  Reported  Concerns  about  FB  Privacy  Practices ”,  Mar.  26, 2018  and 
transcript  of  Zuckerberg ’s  U.S.  Senate  hearing,  the  Washington  Post,  Apr.  10,  2018. 

216.  Making  the  malfeasances  of  FB  even  worse,  in  the  days  after  the  2016  U.S. 
presidential  elections,  Zuckerberg  dismissed  as  "crazy"  any  suggestion  that  disinformation, 
misinformation,  fake  political  propaganda  and  more  broadcast  by  Russian  intelligence 
agents  and  operatives,  the  Trump  Campaign  Robert  Mercer  and  others  on  FB  could  have 
swayed  the  elections,  a  position  the  President  maintains  still. 

217.  Zuckerberg  has  since  said  he  regrets  making  that  and  other  comments,  yet  FB  has 
done  little  to  fix  its  lax  privacy  protection  measures  to  preclude  the  use  of  FB  user’ 
information  to  unlawfully  sway  future  elections,  though  it  did  block  the  political  messages 
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of  Senator  Elizabeth  Warren  and  continues  to  block  Zimmerman  from  promoting  his  books 
on  FB,  books  that  express  political  ideas  very  similar  to  those  of  Senator  Warren’s  and  to 
use  FB  for  any  purpose  whatsoever. 

218.  Meanwhile  Zimmerman’s  FB  “Friends”  continue  to  communicate  with  him  using 
FB,  but  he  is  blocked  from  communicating  with  them. 

219.  FB  is  willfully  engaged  in  censoring  political  speech  on  a  highly  selective  basis, 
lawful  and  non-violent  political  speech  that  is  historically  given  the  highest  protection 
under  the  First  Amendment  to  the  U.S.  Constitution  and  numerous  state  constitutions, 
including  those  of  California  and  North  Carolina  is  censored  by  FB,  while  that  of  Russian 
operatives  and  terrorists  is  not. 

220.  In  a  self-serving  but  ineffectual  effort  to  gain  sympathy,  while  testifying  before 
Congress  Zuckerberg  said  even  his  own  FB  user’  information  was  plundered. 

221.  Prior  to  his  congressional  testimony,  Zuckerberg  set  up  a  war  room  at  FB 
headquarters  and  spent  months  preparing  his  congressional  testimony,  actions  hardly 
necessary  if  he  was  going  to  testify  truthfully. 

222.  Not  once  has  FB  disclosed  to  Plaintiffs  or  possibly  any  other  FB  user  just  how  often 
and  by  whom  Plaintiffs  FB  user’  information  and  that  of  their  FB  “Friends”  was  accessed 
and/or  collected  and  used  by  third  parties,  or  how,  if  at  all,  FB  would  prevent  and/or  remedy 
future  domestic  and  foreign  compromises  and  the  further  spread  of  already  compromised 
information  of  their  FB  user’  information. 
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223 .  What  was  disclosed  are  photos  of  Zuckerberg  in  Moscow  on  October  1,2012  glad¬ 
handing  and  smiling  profusely  as  he  hands  Russian  Prime  Minister  Dmitry  Medvedev  a  T- 
shirt. 

224.  Like  many  another  huge  organization  that  has  faced  the  prospect  of  congressional 
and  regulatory  agency  investigations  into  its  alleged  unlawful  activity,  FB  hired  dozens  of 
expensive  attorneys  and  lobbyists  to  arrange  to  dilute  and/or  thwart  those  congressional 
and  regulatory  investigations.  D.C.  floats  on  a  deep  pool  of  cash,  a  commodity  FB  has 
plenty  of. 

225.  In  an  admission  against  interests,  FB  stated  that  those  who  plundered  the 
information  of  FB  users  would  not  face  consequences  from  FB. 

226.  The  chairman  of  the  New  York  Times  referred  to  Zuckerberg’ s  views  regarding  the 
news  of  FB’s  plundered  user’  information  as  “a  terrifyingly  naive  perspective  that  makes 
my  blood  run  cold  and  the  CEO  of  NewsCorp  said  “We  have  entered  into  an  era  where  the 
pervasiveness  of  FB  makes  Standard  Oil  look  like  a  comer  gas  station”  and  the  editor-in- 
chief  of  Wired  magazine  said:  “News  publishers  have  been  reduced  to  sharecroppers  on 
FB’s  massive  industrial  farm.” 

227.  Congressman  David  Cicilline  stated:  “No  question  that  we  have  reached  a  tipping 
point;  we  stand  at  the  precipice  of  sacrificing  the  news  organizations  that  are  central  to 
uncovering  corruption,  holding  the  government  and  giant  corporations  accountable.” 

228.  Zuckerberg  has  admitted  that  it  was  his  and  FB’s  actions  and  inactions  that  helped 
allow  the  tens-of-millions  of  FB  user’s  Cambridge  Analytica  plundered  information  from 
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to  rig  the  2016  U.S.  presidential  elections  against  Secretary  Clinton  and  in  favor  of  the 
President,  actions  and  inaction  coordinated  with  the  Trump  Campaign,  Russian  intelligence 
agents  and  operatives,  Robert  Mercer  and  others,  a  form  of  cyberwarfare  that  is  possibly 
treasonous, 

229.  A  New  York  State  Attorney  General  joined  with  his  Massachusetts  counterpart  in 
her  investigation  into  FB’s  handling  of  FB  user’  information  stating  that:  “Consumers  have 
a  right  to  know  how  their  information  is  used  and  companies  like  FB  have  a  fundamental 
duty  to  protect  their  user’s  information.” 

230.  There  are  all  sorts  of  privacy  protection  obligations  that  FB  promised  to  undertake 
and  then  failed  to  undertake  under  the  terms  of  the  FTC  2012  “Consent  Decree”  and  FB 
faces  heavy  monetary  fines  and  other  penalties  after  a  second  (201 8)  FTC’s  investigation 
found  that  FB  failed  to  address  the  numerous  charges  of  misconduct  set  out  the  2012  FTC 
“Consent  Decree”  that  FB  agreed  to  remedy., 

231.  In  August  2019,  the  FTC  fined  FB  $  5  billion  for  its  misconduct,  less  than  one 
month’s  revenues  and  testament  to  the  influence  of  the  expensive  attorneys  and  lobbyists 
FB  hired  to  defend  it  against  the  FTC’s  charges. 

232.  FB  has  been  aware  of  the  misappropriation  and  misuse  of  FB  user’  information 
since  at  least  2010  and  yet  has  done  little  to  protect  that  information  or  notify  FB  users 
whose  information  was  sold  or  traded  by  FB  or  plundered  by  third  parties,  deceptive, 
willful  and  reckless  FB  action  and  inaction  that  constitutes  numerous  violations  of  state 
and  federal  laws  dealing  with  compromised  information. 
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233.  Plaintiffs  and  countless  other  FB  users  trusted  FB  because  FB’s  tedious,  non- 
negotiable  contract  states:  “You  own  all  of  the  information  you  post  on  FB,  and  you 
can  control  how  it  is  shared  through  your  privacy  and  application  settings.”  This  and  other 
FB  promises  are  willfully  ,  intentionally  deceptive,  false  and  misleading.  Quote,  as  above, 
taken  from  FB  “Terms  of  Service,”  dated  January  30,  2015.  https://www.FB.com/terms. 

234.  FB’s  “Terms  of  Service”  includes  hundreds  of  intentionally  incomprehensible 
pages  that  are  universally  unread  or  misunderstood  by  FB  users. 

235.  Moreover,  also  without  user  consent,  FB  has  repeatedly  modified  the  “Terms  of 
Service”  and  other  sections  of  its  contract  with  its  users  to  suit  only  its  own  purposes. 

236.  Between  2011  and  2012,  Sandy  Parakilas  was  the  FB  platform  operations  manager 
responsible  for  policing  the  use  of  FB  user’  information  by  third  party  application 
developers  and  others. 

237.  IN  2011,  Parakilas  provided  FB  senior  executives  with  a  detailed  presentation 
outlining  FB’s  user  information  vulnerabilities.  Certain  of  his  warnings  follow:  “My 
concerns  were  that  all  of  the  information  that  left  FB  servers  to  developers  could  not  be 
monitored  by  FB,  so  we  had  no  idea  what  developers  were  doing  with  the  information,” 
Parakilas  maintained,  adding  that  “FB  had  “Terms  of  Service”  and  settings  that  people 
didn’t  read  or  understand  and  FB  did  not  use  its  enforcement  mechanisms,  including  audits 
of  external  developers,  to  ensure  information  was  not  being  misused.” 

238.  FB  Defendants  did  nothing  to  address  the  Parakilas  security  warnings.  See 
https://www.washingtonpost.com/opinions/i-worked-at-FB-i-know-how-cambridge- 
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analytica-could-have-happened/2018/03/20/edc7ef8a-2bc4- 
1 1  e88ad6FBc50284fce8_story.html?utm_term=.faaca3c6d7b4. 

239.  “It  has  been  painful  watching,”  Parakilas  said,  “...because  I  know  that  FB  could 
have  prevented  it.” 

240.  FB’s  failure  to  adequately  protect  its  FB  user’  information  is  further  documented 
at  https://www.theguardian.eom/news/2018/mar/20/FB-information-cambridge- 
analytica-sandy-parakilas. 

241.  To  repeat,  FB’s  non-negotiable  contract  with  its  users’  states:  “You  own  all  of  the 
information  you  post  on  FB,  and  you  can  control  how  it  is  shared  through  your  privacy  and 
application  settings.” 

242.  Yet,  FB  intentionally  breached  this  and  other  contractual  provisions  as  alleged 
herein.  Thus,  FB  willfully,  deceptively,  recklessly  and  dangerously  misled  its  users  into 
believing  that  FB  would  protect  the  privacy  of  their  FB  user’  information. 

243 .  Explicit  FB  policy  further  prohibits  “any  action. .  .that  infringes  or  violates  someone 
else’s  rights  or  otherwise  violates  the  law.”  However,  as  Parakilas  later  revealed,  FB  did 
enforce  its  user  information  privacy  protection  policy. 

244.  By  way  of  illustration,  Parakilas  described  an  infringement  by  a  computer 
application  called  Klout,  which  was  creating  unauthorized  profiles  of  children. 

245.  Parakilas  was  tasked  by  FB  with  calling  a  Klout  executive  to  ask  whether  it  was 
violating  any  FB  policies  because  FB  had  no  other  way  of  verifying  violations. 
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246.  The  Klout  executive  assured  Parakilas  it  was  not  violating  any  FB  policies  and  FB 
took  no  further  action  with  regard  to  the  Klout  violations. 

247.  In  December  2015,  the  Guardian  published  an  article  that  exposed  the  unauthorized 
plunders  of  nearly  a  hundred  million  FB  users  by  Cambridge  Analytica  on  behalf  of 
Senator  Ted  Cruz’s  2016  presidential  campaign.  See  https://www.theguardian.com/us- 
news/201 5/dec/l  1/senator-ted-cruz-president.- 

248.  The  Cambridge  Analytica  plunders  of  FB  user’  information  was  funded  and 
directed  by  Robert  Mercer  (a  megadonor  and  informal  advisor  to  the  Trump  Campaign) 
and  Steve  Bannon  (a  former  Trump  Campaign  and  Trump  administration  senior  political 
strategist  and  advisor)  to  sabotage  the  2016  U.S.  election  cycle. 

249.  For  reasons  as  yet  unknown,  Bannon  is  cited  over  100  times  in  the  Special 
Counsel’s  redacted  report,  while  Robert  Mercer  and  his  partner  in  unlawful  political 
conduct  Rebecka  Mercer  are  not  so  cited. 

250.  Upon  reviewing  FB’s  request  to  delete  the  FB  illicitly  obtained  user  information, 

Cambridge  Analytica’  whistleblower  Christopher  Wylie  said  he  was  “...astonished  by 
FB’s  lackluster  response... All  they  asked  me  to  do  was  tick  a  box  on  a  form  and  post  it 
back.”  See  https://www.theguardian.com/news/201 8/mar/l  7/information- war- 

whistleblower-christopher-wylie-faceook-nix-bannon-trump. 

251.  On  June  18,  2016,  FB  executive  Andrew  Bosworth  defended  FB’s  aggressive 
growth  tactics,  stating  in  a  memo  entitled  The  Ugly  obtained  by  BuzzFeed  that  highlighted 
many  of  FB’s  questionable  practices  and  elevated  FB’s  quest  for  infinite  growth  above  all 

53 


Complaint 


Case# 


Case  3:19-cv-04591-SK  Document  1  Filed  08/07/19  Page  57  of  91 


else,  even  the  security,  privacy  and  safety  of  its  users  by  stating:  “We  connect  more  people. 
That  can  be  bad  if  they  make  it  negative.  Maybe  it  costs  a  life  by  exposing  someone  to 
bullies.  Maybe  someone  dies  in  a  terrorist  attack  coordinated  on  our  tools.  And  we  still 
connect  people,  the  ugly  truth  is  that  we  believe  in  connecting  people  so  deeply  that 
anything  that  allows  us  to  connect  more  people  more  often  is  de  facto  good.  It  is  perhaps 
the  only  area  where  the  metrics  do  tell  the  true  story  as  far  as  we  are  concerned.”  See 
https :  //newsroom  .FB .  com/ news/20 1 8/03 /  suspending-cambridge-analytica/. 

252.  Given  the  cult  of  growth  at  any  cost  instigated  by  FB  Defendants  and  as 
documented  in  Bosworth’s  memo,  FB’s  proposed  remedial  measures  are  grossly 
inadequate  as  corrective  measures  to  assure  the  protection  of  FB  user’  information  and 
were  announced  only  after  Cambridge  Analytica’s  plunder  of  nearly  a  hundred  million  FB 
user’s  information  made  headlines  and  Congress  and  law  enforcers  began  investigating 
FB’s  user’  information  protection  failures. 

253.  FB  Defendants  deceptive,  willful  and  reckless  actions  and  inactions  caused 
Plaintiffs  to  suffer,  among  other  things,  the  following  harms: 

(1)  Plaintiffs  have  zero  control  over  their  information  or  how  that  information  is  used  by  FB 
and  third  parties. 

(2)  The  value  of  Plaintiff ‘s  FB  user  information  has  been  diminished  because  it  is  no  longer 
private  and  is  readily  available  to  third  parties  throughout  the  world. 

(3)  Plaintiffs  FB  user’  information  has  been  abused  and  misused  by  FB  and  is  still 
vulnerable  to  future  abuse  and  misuse. 
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(4)  There  is  no  way  Zimmerman  can  secure  his  FB  user  information  or  protect  it  from  future 
misuse  and  abuse  because,  among  other  reasons,  FB  has  blocked  Zimmerman  from 
accessing  his  information  and  his  FB  accounts  and  Zimmerman  has  not  the  means  to 
learn  who  has  his  FB  user’  information  or  how  it  has  been  or  will  be  used. 

(5)  Zimmerman  has  had  his  opportunity  to  participate  in  the  political  process  diluted  by 
virtue  of  being  improperly  targeted  with  illegal  propagandistic  political  messages  in  the 
past  and  in  the  foreseeable  future. 

(6)  Zimmerman  has  lost  his  opportunity  to  use  the  FB  platform  to  support  the  candidates  of 
his  choice  among  his  FB  user’  “Friends”  and  others. 

(7)  Zimmerman  was  unable  follow  his  plan  to  market  his  books  using  FB  because  his 
accounts  were  blocked  by  FB. 

(8)  Zimmerman  suffered  and  is  still  suffering  monetary  losses  and  significant  emotional 
distress  from  the  sabotage  of  the  2016  U.S.  presidential  elections  as  willfully  and 
recklessly  aided  and  abetted  by  FB. 

(9)  FB  users  and  Zimmerman’s  FB  user’  “Friends”  continue  to  communicate  with  him  but 
since  Zimmerman’s  FB  accounts  remain  blocked,  Zimmerman  cannot  communicate  with 
them. 

254.  Zimmerman,  like  many  other  FB  users,  had  thousands  of  FB  “Friends”  and 

intended  to  use  the  FB  platform  to  support  certain  political  candidates  and  as  his  primary 
means  to  market  his  pro-democracy  political  books  and  his  novel. 
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255.  FB’s  willful  and  reckless  failure  to  adequately  prevent  the  illegal  course  of 
conduct  herein  alleged  regarding  the  plunder  of  FB  user’  information,  including 
Plaintiffs,  leaves  that  information  dangerously  unprotected  and  open  to  further  improper 
and  illegal  use  and  abuse,  such  as  identity  theft  and  elections  manipulation. 

256.  The  access  to  FB  user’  information  granted  by  FB  to  third  parties  and  plundered 
from  FB  is  extremely  valuable.  The  names,  email  addresses,  recovery  email  accounts, 
telephone  numbers,  birthdates,  passwords,  security  question  answers,  and  other 
information  can  all  be  used  to  gain  unfettered  access  to  a  variety  of  Plaintiff  s  online 
commercial,  informational  and  other  resources. 

257.  Identity  thieves  use  plundered  information  to  harm  their  victims  through 
embarrassment,  blackmail,  or  harassment  in  person  or  online,  or  to  commit  other  types  of 
fraud  including  obtaining  ID  cards  or  driver’s  licenses,  fraudulently  obtaining  tax  returns 
and  refunds,  and  obtaining  government  benefits. 

258.  A  presidential  report  on  identity  theft  from  2008  states  that:  “In  addition  to  the 
losses  that  result  when  identity  thieves  fraudulently  open  accounts  or  misuse  existing 
accounts,. .  .individual  victims  often  suffer  indirect  financial  costs,  including  the  costs 
incurred  in  both  civil  litigation  initiated  by  creditors  and  in  overcoming  the  many 
obstacles  they  face  in  obtaining  or  retaining  credit.  Victims  of  non-financial  identity  theft, 
for  example,  health-related  or  criminal  record  fraud,  face  other  types  of  harm  and 
frustration.”' 
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259.  In  addition  to  out-of-pocket  expenses  that  can  reach  thousands  of  dollars  for  the 
victims  of  new  account  identity  theft,  and  the  emotional  toll  identity  theft  can  take,  some 
victims  have  to  spend  what  can  amount  to  a  considerable  amount  of  time  and  money  to 
repair  the  damage  caused  by  the  identity  thieves. 

260.  For  example,  victims  of  identity  theft  must  correct  fraudulent  information  in  their 
credit  reports  and  monitor  their  reports  for  future  inaccuracies,  close  existing  bank 
accounts  and  open  new  ones,  and  dispute  charges  with  individual  creditors.  See,  the 
President’s  Identity  Theft  Task  Force,  Combating  Identity  Theft:  A  Strategic  Plan, 
Federal  Trade  Commission,  1 1  (April  2007), 

http://www.ftc.gov/sites/default/files/documents/reports/  combating-identity-theft- 
strategic-plan/  strategicplan .  pdf. 

261 .  The  problems  associated  with  identity  theft  are  exacerbated  by  the  fact  that  many 
identity  thieves  will  wait  years  before  attempting  to  use  the  information  they  have 
obtained.  Indeed,  Zimmerman  will  need  to  remain  vigilant  against  unauthorized 
information  use  for  the  rest  of  the  limited  time  he  has  left. 

262.  Once  plundered,  FB  user’  information  can  be  used  in  a  number  of  different  ways, 
including  sale  on  the  “Dark  Web,”  a  heavily  encrypted  part  of  the  Internet  that  makes  it 
difficult  for  authorities  to  detect  the  location  or  owners  of  a  website. 

263 .  The  “Dark  Web”  is  not  indexed  by  Google  and  is  only  accessible  using  a  Tor 
browser  (or  similar  tool),  which  aims  to  conceal  user’s  identities  and  online  activity.  The 
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“Dark  Web”  is  notorious  for  hosting  marketplaces  selling  illegal  items  such  as  weapons, 
drugs,  and  plundered  information. 

264.  Once  someone  buys  plundered  victim  information,  it  is  then  used  to  gain 
unfettered  access  to  different  areas  of  the  victim’s  digital  life,  including  bank  accounts, 
Internet-based  platforms  and  credit  card  details.  During  that  process,  other  sensitive 
information  may  be  harvested  from  the  victim’s  accounts,  as  well  as  from  those 
belonging  to  family,  friends,  and  colleagues. 

265.  In  addition  to  the  information  it  contains,  a  plundered  FB  account  can  be  very 
valuable  to  cyber  criminals. 

266.  Since  FB  accounts  are  linked  to  myriad  financial  and  non-fmancial  accounts,  a 
plundered  FB  user’  account  offers  plunderers  countless  opportunities  to  ply  their  illegal 
and  harmful  pursuits.  See,  Brian  Hamrick,  The  Dark  Web:  A  trip  into  the  Underbelly  of 
the  Internet,  WLWT News  (Feb.  9,  2017  8:51  PM),  http://www.wlwt.com/article/the-dark- 
web-a-trip-into-the-underbelly-of-the-Intemet/8698419. 

267.  Adding  to  Plaintiffs  fear  that  their  information  has  been  plundered  by  identity 
thieves  is  the  fact  that  none  of  FB’s  alleged  remedial  actions  included  giving  proper 
notice  to  Plaintiffs  that  their  FB  user’  information  may  have  been  plundered. 

268 .  Plaintiffs  had  been  registered  FB  users  with  thousands  of  FB  “Friends”  for  several 
years  before  FB  blocked  their  accounts  and  had  provided  FB  their  information  as 
consideration  for  the  use  of  the  FB  platform  and  relied  on  FB’s  contractual  promises  to 
protect  their  information  from  access  and  use  by  third  parties. 
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269.  Plaintiffs  have  never  consented  to  allowing  FB  or  any  third  party  to  sell,  trade  or 
allow  unfettered  access  to  their  FB  user’  information  for  political  or  any  other  purpose. 

270.  Plaintiffs  believe  they  are  among  the  millions  of  Americans  whose  FB  user’ 
information  was  plundered  by  Cambridge  Analytica. 

271 .  Zimmerman  has  no  way  to  learn  how  many  information  plunderers  and  non¬ 
plunderers  have  had  unfettered  access  to  and  collected  for  future  use  Plaintiffs  FB  user 
information. 

272.  Zimmerman  could  not  have  been  reasonably  expected  to  know  that  FB’s  stored 
user’  information  could  be  plundered,  aggregated,  targeted  and  then  used  for  improper 
and  illegal  purposes,  including  the  sabotage  of  the  2016  U.S.  presidential  elections. 

273.  The  Economist  magazine  reported  in  2017  that:  “The  world’s  most  valuable 
resource  is  no  longer  oil,  but  information.” 

274.  FB  captured  and  stored  information  includes:  person  and  company  names  and 
addresses,  hometowns;  birthdates;  gender;  family  connections;  educational  achievements; 
email  addresses;  relationship  statuses;  work  histories;  personal  and  business  interests; 
hobbies,  religious  and  political  affiliations;  phone  numbers;  dates  and  times  of  active 
sessions  on  FB;  dates  and  times  and  titles  of  advertisements  ;  connections  with  other  FB 
users  and  non-users;  communications  with  other  FB  users,  current  and  last  locations; 
attendance  at  events  and  social  gatherings,  stored  credit  card  information,  the  people  the 
FB  user’  is  “Friends”  with  and/or  follows,  FB  groups  the  FB  user’  is  a  member  of;  a  list 
of  Internet  addresses  where  FB  users  have  used  while  using  their  FB  accounts,  posts  or 
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sites  the  FB  user’  has  liked,  searches  conducted  by  the  FB  user,  photographs  and  videos 
documenting  all  aspects  of  a  FB  user’s  life  and  the  lives  of  his  “Friends”  and  family;  and 
their  activity  in  FB-connected  applications. 

275.  FB’s  information  storage  repositories  contain  multiple  quintillions  of  FB  user’ 
and  non-user’  information  as  amassed  from  billions  of  persons  and  businesses  throughout 
the  world.  One  quintillion  of  information  is  the  equivalent  of  all  of  the  words  ever  uttered 
since  Adam  and  Eve  first  spoke  in  the  “Garden  of  Eden.” 

276.  FB  Defendants  have  schemed  to  monetize  in  various  ways  its  vast  store  of  FB 
user’  and  non-user  information  in  conscious  disregard  for  the  contractual  and 
constitutional  rights  of  its  users  and  non-users  and  by  so  doing  have  inflicted  enormous 
damage  on  them  and  on  Plaintiffs. 

277.  FB  has  successfully  willfully  misrepresented  itself  as  an  eleemosynary  enterprise 
that  enables  free  communication  among  its  users,  when,  in  fact,  it  was  selling  and  trading 
strategically  targeted  unfettered  access  to  FB  stored  user’  information  to  commercial  and 
political  advertisers  such  as  the  Russian  operatives  and  intelligence  agents  thirteen  of 
which  remain  indicted  by  the  Special  Counsel  and  fugitives  from  justice.. 

278.  FB’s  practice  of  selling  targeted  unfettered  access  to  FB  user’  information  was  an 
willful  FB  business  strategy  designed  and  implemented  by  FB  to  increase  FB  revenues 
and  market  power  by  monetizing  its  user’s  information,  a  business  strategy  that  proved 
wildly  successful  and  created  huge  incentives  for  FB  to  ignore  the  2012  FTC  “Consent 
Decree”  it  had  signed. 
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279.  Additionally,  FB  collects  user’  information  from  Instagram,  Messenger  and 
Whatsapp,  three  other  media/mobile  applications  that  FB  owns  and  manages,  making  it 
impossible  to  assess  how  much  FB  user’  information  has  been  sold  or  traded  by  FB  and 
plundered  by  third  parties  with  and  without  FB’s  knowledge  and/or  permission. 

280.  FB  executives  have  admitted  that  third  parties  have  used  FB’s  “Friend”  search 
function  to  plunder  FB  user’  information  by  submitting  phone  numbers  or  email 
addresses  they  already  have  through  FB’s  search  and  account  recovery,  stating:  “Given 
the  scale  and  sophistication  of  malevolent  third  party  activity,  we  believe  ‘most  people’ 
on  FB  could  have  had  their  public  profile  scraped  in  this  way.” 

281.  “Most  people”  on  FB  means  that  we’re  talking  about  at  least  hundreds-of-millions 
of  FB  users  whose  FB  user’  information  has  been  spirited  away  into  countless  third  party 
information  repositories. 

282.  A  vital  feature  in  the  rapid  growth  in  the  numbers  of  FB  users  is  the  false  sense  of 
control  FB  users,  including  Plaintiffs,  have  been  led  by  FB  to  believe  they  have  over  their 
information. 

283.  FB’s  privacy  settings  purport  to  offer  FB  users  control  over  the  dissemination  of 
various  categories  of  their  user’  information,  whether  it  be  privately  with  particular  FB 
users,  or  with  all  of  their  FB  user’  “Friends”,  or  with  “Friends”  of  FB  “Friends”,  or  with 
all  FB  users.  See  https://ww.cnbc.com/2018/04/04/FB-updates-its-terms-of-service-to- 
include-messenger-instagram.html. 
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284.  Thus,  FB  users  reasonably  expected  that  their  information  would  only  be 
accessible  to  the  extent  they  authorized  such  access.  See 

https://www.theatlantic.com/technology/archive/2018/04/most-people-on-FB-may-have- 
had-their-accounts-scraped/55728  5/. 

285.  In  reality,  the  information  of  FB  users  was  not  within  the  control  of  FB  users,  but 
instead  had  been  plundered  by  Cambridge  Analytica  (a  foreign  business  entity  funded 
and  directed  by  U.S.  citizen  Robert  Mercer)  and  was  used  by  FB,  Russian  intelligence 
agents  and  operatives,  the  Trump  Campaign,  Robert  Mercer  and  others  who  conspired  to 
and  succeeded  in  sabotaging  the  2016  U.S.  presidential  elections. 

286.  FB’s  greed  and  quest  for  ever  increasing  profit  and  monopolistic  market  power 
enabled  third  parties  like  Cambridge  Analytica  to  unlawfully  appropriate  the  FB  user 
information  of  nearly  a  1 00  million  FB  users,  information  that  was  later  used  by  FB, 
Russian  intelligence  agents  and  operatives,  the  Trump  Campaign,  Robert  Mercer  and 
others  to  successfully  sabotage  the  2016  U.S.  presidential  elections. 

287.  Beyond  those  FB’  efforts  to  undermine  the  fundamental  constitutional  right  of 
Zimmerman  to  vote  in  a  free  and  fair  elections,  FB,  Russian  intelligence  agents  and 
operatives,  the  Trump  Campaign,  Robert  Mercer  and  others  sought  to  and  did 
destabilized  U.S.  democratic  institutions  and  the  rule  of  law. 

288 .  Zuckerberg  has  publicly  admitted  more  than  once  that  people  share  information 
on  FB  because  “ .  ..they  know  their  privacy  is  going  to  be  protected,  the  security  of 
privacy  allows  FB  users  to  freely  engage  and  share  their  feel  free  to  connect  because 
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they  know  that  their  privacy  is  going  to  be  protected.”  See 

https://www.cnbc.eom/2018/04/03/zuckerberg-on-FB-and-privacy-before-cambridge- 
analytica-scandal  .html . 

289.  In  the  weeks  leading  up  to  the  2016  U.S.  presidential  election  cycle,  Roger 
McNamee,  one  of  FB’s  most  influential  investors,  sounded  the  alarm  about  the  FB  user’ 
information  being  accessed  by  and  used  by  numerous  authorized  and  unauthorized  third 
parties. 

290.  FB  ignored  McNamee’s  concerns  and  it  was  not  until  other  brave  whistleblowers 
came  forward  that  FB  finally  acknowledged  the  Cambridge  Analytica  plunders  of  FB 
user’  information. 

291 .  Willfully  ignoring  the  2012  “Consent  Decree”  it  had  signed  with  the  FTC,  FB  did 
not  provide  any  notice  to  its  users,  including  Plaintiffs,  of  the  user’  information  breaches, 
making  injunctive  relief  particularly  urgent. 

292.  FB  has  not  only  failed  to  provide  any  notice  of  the  FB  user’  information  breaches 
to  its  FB  users,  but  instead  has,  until  recently,  much  like  the  President’s  oft  repeated 
denial  that  there  were  Russian  intrusions  in  the  2016  U.S.  presidential  election  cycle, 
steadfastly  denied  there  were  breaches  of  its  users’  information. 

293.  The  FB  user’  information  breaches  are  far  more  egregious  than  the  notorious 
Equifax  information  breach  because  Equifax  disseminated  notice  to  its  customers  of  the 
information  breach  and  provided  a  way  to  verify  whether  a  particular  consumer’s 
information  was  plundered. 
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294.  Instead,  FB  willfully  suppressed  information  about  the  information  breaches  until 
investigative  reporters  brought  it  to  public  attention,  and  even  then  FB  did  nothing  much 
to  further  inform  its  users  that  their  information  had  been  plundered  or  what  FB  or  FB 
users  could  do  to  protect  themselves  or  how  their  plundered  information  could  be  used  to 
damage  them.  See  https://economictimes.indiatimes.com/tech/Internet/information- 
breach-claims-false-FB/articleshow/63353256.cms. 

295.  This  action  seeks  to  hold  FB  accountable  for,  among  other  things,  their  roles  in 
facilitating  the  sabotage  of  the  2016  U.S.  presidential  elections,  for  blocking  Plaintiffs 
FB  accounts  while  allowing  unfettered  access  to  now  indicted  Russian  intelligence  agents 
and  operatives,  the  Trump  Campaign,  Cambridge  Analytica,  Robert  Mercer  and 
numerous  unnamed  others  to  use  FB  to  successfully  sabotage  the  2016  U.S.  presidential 
election  cycle,  for  subjecting  Plaintiffs  to  future  identity  theft  and  other  nefarious 
activities  and  for  falsely  inducing  Plaintiffs  to  use  the  FB  platform  by  contractually 
promising  to  protect  Plaintiffs  FB  user  information. 

296.  FB  obtains  the  lion’s  share  of  its  revenue  from  advertisers. 

297.  FB’s  2017  corporate  financial  statement  lists  one  of  the  major  risks  to  its  business 
as  a  ..decrease  in  user  engagement,  including  time  spent  on  our  products.” 

298.  Another  FB-stated  major  risk  to  FB’s  business  is  the  potential  decline  in  “the 
effectiveness  of  our  strategic  ad  targeting  and  the  degree  to  which  users  opt  out  of  certain 
types  of  ad  targeting,  including  as  a  result  of  changes  that  enhance  the  user’s  privacy.” 
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299.  With  regard  to  FB’s  strategic  ad  targeting,  FB  is  now  legally  bound  to  stop 
advertisers  from  discriminating  against  people  because  of  their  race  and  other  factors. 

300.  FB  is  now  legally  bound  to  never  again  allow  those  advertising  on  FB  to 
discriminate  against  Americans  on  the  basis  of  race,  national  origin,  religion,  sexual 
orientation  and  other  protected  categories,  a  widespread  FB  advertiser  practice  that  the 
State  of  Washington  deemed  “unlawful  discrimination.” 

301 .  The  FB  settlement  with  Washington  State  resulted  from  a  two-year  probe. 

Because  it  is  legally  enforceable,  the  settlement  holds  FB  to  a  higher  standard  than 
previous  commitments,  which  previously  had  been  voluntary  and  ignored  by  FB.  It  also 
expands  the  types  of  ads  that  will  receive  more  enforcement  from  FB  to  include  insurance 
and  “public  accommodations”,  two  categories  FB  had  never  explicitly  said  were  covered 
under  its  anti-discrimination  efforts. 

302.  The  Washington  State  probe  stemmed  from  reports  in  ProPublica,  beginning  in 
2016,  that  found  advertisers,  using  FB’s  strategic  micro-targeting  tools,  could  conceal 
housing  ads  from  African  American  users  and  other  minorities.  Investigators  in  the 
Attorney  General’s  office  said  that  they  tested  the  system  by  creating  “20  fake  ads"  on 
FB  as  part  of  their  investigation  in  November  and  December  2017,  touching  everything 
from  nightclubs  to  employment  opportunities,  that  “excluded  one  or  more  ethnic 
minorities.” 

303.  After  ProPublica ’s  investigation,  FB  said  it  would  no  longer  let  advertisers 
strategically  target  ads  for  housing,  credit  offers  and  employment  by  “ethnic  affinities,”  a 
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category  that  the  social  network  had  created  to  enable  businesses  to  reach  minority 
groups. 

304.  Even  after  the  FB’s  voluntary  pledge,  reports  revealed  that  FB  advertisers  who 
posted  housing  ads  were  still  able  to  exclude  people  on  the  basis  of  race,  calling  into 
question  FB’s  promise  of  stepped-up  enforcement.  FB’s  ad  system  also  automatically 
approved  housing  ads  that  excluded  mothers  of  high  school  kids,  Jewish  people  and 
Spanish  speakers. 

305.  As  a  presidential  candidate  and  then  as  President,  Trump  has  lied  to  the  American 
people  well  over  10,000  times,  including  repeated  denials  of  the  Russian  government’s 
participation  in  the  sabotage  of  the  2016  U.S.  presidential  elections,  contravening  the 
U.S.  National  Security  Intelligence  Community  and  the  Special  Counsel’s  report  that  has 
made  it  clear  that  Russian  covert  operations  made  use  of  FB  and  other  Internet-based 
platforms  in  a  successful  effort  to  sabotage  the  2016  U.S.  presidential  elections. 

306.  Russian  trolls  amassed  hundreds  of  thousands,  possibly  millions,  of  American 
followers  on  FB,  targeted  them  during  the  2016  U.S.  presidential  elections  with  a  multi¬ 
faceted  campaign  of  anti-democratic  political  propaganda  and  pro-Trump  anti-Clinton 
advertisement,  paid  for  it  part  with  Russian  rubles,  while  FB  sat  back  observing  the  online 
sabotage,  profiting  from  it  and  actively  participating  in  the  sabotage  by  assigning  FB 
employees  to  the  Trump  Campaign’s  San  Antonio  100-person  information  processing 
facility,  where  the  Cambridge  Analytica-created  voter  profiles  of  millions  of  American  FB 
users  were  used  to  help  in  the  sabotage  the  2016  U.S.  presidential  elections. 
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307.  Plaintiff  Zimmerman  is  an  American  citizen  and  veteran  who  voted  in  the  2016 
U.S.  presidential  elections  (primary  and  general)  with  the  reasonable  expectation  that  the 
elections  would  be  free  and  fair  and  not  sabotaged  by  FB,  Russian  intelligence  agents  and 
operatives,  the  Trump  Campaign,  Robert  Mercer,  Cambridge  Analytica  and  others,  and 
that  the  privacy  of  his  FB  user’  information  and  that  of  his  FB  “Friends”  would  be 
protected  by  FB  and  not  used  to  help  sabotage  the  2016  U.S.  presidential  elections. 

308.  President  Abraham  Lincoln  once  said:  “I  see  in  the  near  future  a  crisis 
approaching  that  unnerves  me  and  causes  me  to  tremble  for  the  safety  of  my 
country. . .  corporations  have  been  enthroned,  an  era  of  corruption  in  high  places  will 
follow,  and  the  money-power  of  the  country  will  endeavor  to  prolong  its  reign  by 
working  up  the  prejudices  of  the  people  until  the  wealth  is  aggregated  in  a  few  hands  and 
the  republic  is  destroyed.” 

309.  These  omniscient  thoughts  of  President  Lincoln  are  borrowed  from  a  book  of 
poetry  entitled  Patriotic  Poems  of  Freedom,  written  by  Natasha  H.  in  2001,  when  she 
was  ten  years  old. 

310.  Corrupt  foreign  and  domestic  business  entities,  billionaires,  political  organizations 
and  individuals  such  as  Robert  Mercer,  Mark  Zuckerberg,  Sheryl  Sandberg,  the  Trump 
Campaign  and  the  Trump  Organization  and  their  numerous  unnamed  co-conspirators, 
including  Russian  President  Putin,  Russian,  Ukrainian  and  Balkan  oligarchs  and  their 
numerous  agents  and  operatives  are  metastasizing,  malignant  cancers  eating  away  at  the 
pillars  of  our  democratic  institutions. 
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311.  Bending  toward  transparent  justice,  our  democracy  does  so  by  force  of  law  as 
guided  by  our  judiciary  and  supported  by  the  grassroots  efforts  of  “We  the  People.” 

312.  Every  now  and  then  Americans  are  confronted  by  pure  evil  in  the  form  of 
terrorists  like  Hitler,  Stalin,  bin-Laden  and  now  a  new  form  of  evil,  cyber-terrorists. 

313.  During  the  last  week  of  August  2017,  U.S.  Secretary  of  Defense  James  “Mad 
Dog”  Mattis  and  U.S.  Secretary  of  State  Rex  Tillerson  condemned  the  President’s  anti¬ 
democratic  values  and  actions,  stating  in  effect  that  the  President  speaks  for  himself  and 
not  for  them,  and  not  necessarily  in  America’s  best  interests,  stopping  just  short  of  calling 
the  President’s  words  and  actions  those  of  a  home-grown  terrorist. 

314.  The  President  countered  calling  his  self-appointed  Secretary  of  State  Rex 
Tillerson  “dumb  as  a  rock.” 

315.  General  Mattis,  described  the  President’s  understating  of  the  world  as  that  of  "a 
fifth  or  sixth  grader." 

316.  At  a  White  House  meeting,  the  President’s  former  Chief  of  Staff,  four-star 
General  John  Kelly,  said  of  the  President:  "He's  an  idiot.  It's  pointless  to  try  to  convince 
him  of  anything.  He's  gone  off  the  rails,  we're  in  Crazytown.  I  don't  even  know  why  any 
of  us  are  here.  This  is  the  worst  job  I've  ever  had. 

317.  And  the  President's  former  personal  lawyer  John  Dowd  described  the  President  as 
"a  fucking  liar,"  telling  the  President  he  would  end  up  in  an  "orange  jump  suit"  if  he  gave 
oral  testimony  to  the  Special  Counsel’s  investigation  into  Russian  interference  in  the 
2016  U.S.  presidential  elections. 
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318.  In  one  numerous  obstructions  of  justice,  the  President  refused  to  give  oral 
testimony  to  the  Special  Counsel  and  declined  to  answer  a  preponderance  of  written 
question  proffered  by  the  Special  Counsel. 

319.  In  addition  to  influencing  our  elections,  invading  our  privacy,  censoring  our  free 
speech,  actively  working  to  defile  our  democratic  institutions  and  ruining  competitors 
with  its  monopolistic  practices  and  efforts  to  control  consumer  behavior,  now  FB  wants 
to  introduce  its  own  currency. 

320.  Following  U.S.  banking  giant  J.P  Morgan  Chase’s  launch  of  cryptocurrency 
JPMCoin,  FB  is  planning  to  launch  its  own  cryptocurrency  in  early  2020,  allowing  its 
users  to  make  digital  payments  in  dozens  of  countries. 

321.  In  2018,  FB  asked  U.  S.  banks  to  share  detailed  financial  information  about  their 
customers. 

322.  The  FB  created  cryptocurrency,  named  GlobalCoin,  would  enable  FB’s  billions  of 
users  to  change  dollars  and  other  international  currencies  into  its  digital  coins.  The  coins 
could  then  be  used  to  buy  things  on  the  Internet  and  in  shops  and  other  outlets,  or  to 
transfer  money  without  needing  a  bank  account. 

323.  According  to  the  BBC,  Zuckerberg  met  the  governor  of  the  Bank  of  England, 
Mark  Carney,  to  discuss  its  cryptocurrency  plans. 

324.  Zuckerberg  has  also  discussed  the  cryptocurrency  proposal,  known  as  Project 
Libra,  with  U.S.  Treasury  officials  and  is  in  talks  withmoney  transfer  firms,  including 
Western  Union. 
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325.  Zuckerberg  told  the  FB’s  developer  conference:  “I  believe  it  should  be  as  easy  to 
send  money  to  someone  as  it  is  to  send  a  photo.” 

326.  In  order  to  try  to  stabilize  the  digital  currency  the  company  is  looking  to  peg  its 
value  to  a  basket  of  established  currencies,  including  the  U.S.  dollar,  the  euro  and  the 
Japanese  yen. 

327.  FB  is  also  looking  at  paying  its  users  fractions  of  a  coin  for  activities  such  as 
viewing  FB  ads  and  interacting  with  FB  content  related  to  online  shopping. 

328.  However,  experts  believe  that  regulatory  issues  and  FB’s  poor  track  record  on 
data  privacy  and  protection  are  likely  to  prove  to  be  the  biggest  hurdles  to  making  FB’s 
cryptocurrency  a  success. 

329.  “FB  is  not  regulated  in  the  same  way  as  banks  are,  and  the  cryptocurrency 
industry  is,  [for  the  most  part,]  unregulated,”  said  Rebecca  Harding,  chief  executive  of 
banking  trade  data  analytics  firm  Coriolis  Technologies. 

330.  The  U.S.  Senate  Banking  Committee  wrote  an  open  letter  to  Zuckerberg  asking 
how  the  currency  would  work,  what  consumer  protection  would  be  offered  and  how 
information  would  be  secured. 

331 .  It  emerged  recently  that  FB  is  looking  for  funding  to  support  the  project  and  has 
held  talks  with  payments  giants  including  Visa  and  Mastercard. 

332.  FB  has  been  long  expected  to  make  a  move  in  financial  services,  having  hired  the 
former  PayPal  president  David  Marcus  to  run  its  messaging  application  in  2014. 
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333.  Marcus,  a  board  member  of  crypto  exchange  Coinbase,  runs  FB’s  blockchain 
initiatives,  the  technology  on  which  cryptocurrencies  run. 

334.  FB’s  staff  has  already  had  unfettered  access  to  hundreds  of  millions  of  FB  user’ 
passwords  and  used  them  for  nefarious  purposes. 

335.  FB  has  admitted  that  it  has  not  properly  masked  the  passwords  of  hundreds  of 
millions  of  its  users  but  had  stored  them  as  plain  text  in  an  internal  database  that  could  be 
accessed  unencrypted  by  its  staff. 

336.  The  fact  that  WhatsApp  is  owned  by  FB  gives  experts  pause.  Though  there  are  as 
yet  no  known  major  breaches  of  WhatsApp  information  since  FB  bought  the  application 
in  2014,  unlike  some  other  encrypted  messaging  applications,  including  Signal, 
WhatsApp  stores  the  call  times,  location  and  other  meta-information  of  its  user’s  chats, 
which  means  they're  held  by  FB. 

337.  WhatsApp  co-founder  Brian  Acton,  who  sold  WhatsApp  to  FB,  suggested 
everyone  should  delete  their  FB  accounts  because  of  FB’s  many  privacy  scandals. 

338.  Left  unchecked,  FB  will  play  a  major  role  in  continuing  to  spread  the  sort  of 
propagandistic  disinformation,  misinformation  and  propagandists  messaging  and 
advertising  that  breeds  anti-democratic  activity  in  the  U.S.  and  an  exponential  increase  in 
violence  as  groups  with  opposing  political  views  are  thrown  a  steady  diet  of  hate 
messages  broadcast  on  the  FB  platform. 

339.  Now  facing  numerous  regulatory  and  prosecutorial  investigations  as  well  as 
numerous  public  and  private  lawsuits  as  a  result  of  violating  its  user’s  privacy  and  free 
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speech  rights  and  its  monopolistic  practices,  FB’s  recent  SEC  filing  provides  an 
interesting  look  at  just  how  serious  FB  is  treating  the  recent  round  of  federal  and  state 
lawsuits  as  so  significant  they  have  disclosed  them  in  the  company’s  quarterly  SEC 
report. 

340.  In  a  section  of  a  FB  SEC  filing  entitled  “Legal  Proceedings,”  FB  states: 
“Beginning  on  March  20,  2018,  multiple  putative  class  actions  and  derivative  actions 
were  filed  in  state  and  federal  courts  in  the  U.S.  and  elsewhere  against  us  and  certain  of 
our  directors  and  officers  alleging  violations  of  securities  laws,  breach  of  fiduciary  duties, 
and  other  causes  of  action  in  connection  with  the  misuse  of  certain  data  by  a  developer 
that  shared  such  data  with  third  parties  [. . .]  the  events  surrounding  this  misuse  of  data 
became  the  subject  of  U.S.  Federal  Trade  Commission  and  other  government  inquiries  in 
the  U.S.,  Europe,  and  other  jurisdictions.  Any  such  inquiries  could  subject  us  to 
substantial  fines  and  costs,  divert  resources  and  the  attention  of  management  from  our 
business,  or  adversely  affect  our  business.” 

341 .  However,  willfully  omitted  from  that  FB  statement  are:  FB’s  corrupt  for-profit 
role  in  aiding  and  abetting  Putin-led  Russian  operatives,  the  Trump  Campaign, 
Cambridge  Analytica,  Robert  Mercer  and  others  in  the  malicious  cyber-sabotage  of  the 
2016  U.S.  presidential  elections;  that  prosecution  for  such  aiding  and  abetting  could  lead 
to  FB’s  shutdown  and/or  huge  penalties  and  the  prospect  of  imprisonment  of  the  major 
U.S. -based  FB  executives  involved  of  the  2016  malicious  cyber-sabotage  operations. 
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342.  Using  the  technical  and  financial  resources  of  FB,  Cambridge  Analytica,  Robert 
Mercer,  the  Trump  Campaign  and  others  unlawfully  obtained  Plaintiffs  FB  user’ 
information  and  that  of  their  FB  “Friends”  from  FB’s  information  repositories  and  used  it 
to  strategically  target  propagandists  messaging,  misinformation,  disinformation,  lies  and 
other  fabrications  over  the  FB  platform  to  boost  Trump’s  candidacy  and  in  so  doing 
directly,  recklessly  and  unlawfully  helped  sabotage  of  the  2016  U.S.  presidential 
elections. 

343.  Proof  that  Americans  who  voted  for  Trump  encountered  propagandistic 
messaging  far  more  often  than  the  general  voting  population  follows. 

344.  When  Trump  supporters  were  asked  if  the  future  2020  presidential  election  should 
be  postponed  until  the  country  can  make  sure  that  only  eligible  American  citizens  can 
vote,  would  you  support  or  oppose  postponing  the  election?  (1)  A  majority  of  the  650- 
Trump-supporting  Republicans  surveyed  said  yes;  (2)  close  to  half  thought  the  President 
had  won  the  popular  vote,  which  he  lost  by  millions  of  votes;  (3)  more  than  two-thirds 
believed  that  millions  of  illegal  immigrants  had  voted,  which  never  happened;  and  (4) 
that  voter  fraud  happens  regularly,  when  in  fact  voter  fraud  is  extremely  rare,  but  election 
rigging  by  Russians  to  favor  Trump  is  not.  See  Messing  with  the  Enemy,  Surviving  in  a 
Social  Media  World  of  Hackers,  Terrorists,  Russians  and  Fake  News  by  Clint  Watts. 

345.  FB  clawed  its  way  to  monopoly  market  power  by  fraudulently  inducing  billions  of 
people,  including  Plaintiffs,  to  use  the  FB  platform,  never  realizing  that  FB’s  offer  of  that 
purportedly  free  service  was  not  free  because  FB  fraudulently  intended  to  sell,  trade  and 
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otherwise  make  available  to  third  parties  Plaintiffs  FB  user’  information  and  that  of 
their  FB  “Friends,”  and  that  FB’s  contractual  promises  to  protect  Plaintiffs  information 
nothing  but  an  outrageous  and  continuing  lie. 

346.  Ultimately,  Plaintiffs  plundered  FB  user’  information  and  that  of  Plaintiff  s  FB 
“Friends”  would  be  used  by  FB,  the  Trump  Campaign,  Robert  Mercer,  Russian 
intelligence  agents  and  operatives  and  others  to  sabotage  the  2016  U.S.  presidential 
elections  and  is  now  being  used  to  rig  the  2020  presidential  elections. 

347.  Plaintiffhad  intended  to  use  the  FB  platform  for  personal  political 
communications  and  to  promote  the  sale  of  his  political  and  non-political  books. 

348.  But,  FB  blocked  Plaintiffs  unfettered  access  to  his  FB  personal  and  business 
accounts,  making  it  impossible  for  Zimmerman  to  delete  his  information  from  FB’s 
computer  files,  or  to  know  how  his  information  was  being  used  by  third  parties,  or  to 
market  his  books  especially  Fair  Warning,  The  American  Challenge,  Common  Sense  and 
political  ideas  using  the  FB  platform  or  to  respond  to  thousands  of  messages  from  his  FB 
“friends.” 

349.  Plaintiff  Zimmerman  alleges  his  FB  accounts  were  blocked  because  his  non¬ 
violent  progressive  political  views  ran  counter  to  those  of  FB„  who  later  showed  their 
anti-democratic  political  ideology  when  they,  along  with  the  Trump  Campaign,  Robert 
Mercer,  Russian  intelligence  agents  and  operatives  and  others  sabotaged  the  2016  U.S. 
political  elections  in  favor  of  candidate  Trump. 
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350.  FB  was  paid  in  part  in  rubles  by  Russian  operatives  and  allowed  those  operatives 
to  broadcast  hundreds  of  millions  of  propagandists  messages,  mostly  disinformation, 
misinformation,  lies  and  other  fabrications  that  aggressively  promoted  the  sale  of  anti¬ 
democratic  books  and  hate  messaging  to  hundreds  of  millions  of  unsuspecting 
prospective  American  voters. 

351.  It  is  unlikely  that  Plaintiffs  will  ever  leam  just  how  many  third  parties  have 
collected  and  have  used  their  FB  user’  information,  or  will  use  it  in  the  future,  or  why  FB 
shut  Plaintiffs’  accounts  down  while  encouraging  the  unlawful  propagandistic  messaging 
of  Russian  intelligence  agents  and  operatives,  Robert  Mercer,  the  Trump  Campaign  and 
others. 

352.  On  or  about  May  21,  2018,  FB  began  running  ads  on  U.S.  national  television,  and 
possibly  elsewhere,  promising  to  take  steps  to  protect  the  privacy  of  its  user’s  FB 
information. 

353.  However,  to  date,  these  FB  promises,  like  many  other  of  FB’s  prior  promises, 
were  empty  promises  as  FB  has  not  taken  any  substantive  steps  to  preclude  Robert 
Mercer  or  the  Trump  Campaign  or  Russian  operatives  or  others  from  the  future  sabotage 
of  U.S.  elections  using  the  FB  platform  or  from  using  already  misappropriated  FB  user’ 
information  for  whatever  future  purposes  they  wish. 

354.  Two  Russian  cyberwarfare  operatives  described  the  effects  of  their  cyberwarfare 
activities  stating:  “The  mass  media  today  can  stir  up  chaos  and  wreak  havoc  and 
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confusion  in  government  and  military  management  of  any  country  and  instill  ideas  of 
violence,  treachery,  and  immorality,  and  demoralize  the  public. 

355.  Put  through  this  propagandistic  onslaught,  the  U.S.  armed  forces  and  the  public 
generally  will  not  be  ready  with  active  defenses.”  See  pp  136-137  in  the  Plot  to  Destroy 
Democracy  by  Malcomb  Nance. 

356.  Putin-led  Russian  intelligence  agents  and  operatives  make  no  distinction  between 
war  and  peace  as  they  upped  their  cyberwarfare  activities  during  the  2016  U.S. 
presidential  cycle  and  aggressively  undertook  and  continue  to  undertake  strategic 
subversive  tasks  aimed  at  disorienting  U.S.  voters,  sabotaging  our  elections  and 
destabilizing  our  governmental  institutions  and  the  rule  of  law. 

357.  FB  Chief  Security  Officer  Alex  Stamos  testifi  ed  to  Congress  that  Russian 
propaganda  and  Robert  Mercer’s  far-right  political  ads  were  broadcast  to  approximately 
150  million  FB  users  during  the  2016  U.S.  presidential  election  cycle,  most  of  which 
were  targeted  at  key  swing  states. 

358.  Stamos  said  he  repeatedly  confronted  FB  executives  over  the  lack  of  security 
protecting  the  FB  platform  and  once  told  his  FB  security  team  that  he  explained  to  FB’s 
top  executives  that  FB  has  “the  threat  profile  of  a  Northrop  Grumman  or  a  Raytheon  or 
another  defense  contractor,  but  we  run  our  corporate  network  like  a  college  campus.” 

359.  In  2010,  the  U.S.  Supreme  Court  lifted  restraints  on  how  much  money  wealthy 
donors  such  as  Robert  Mercer  may  spend  to  influence  election  outcomes,  and  by  2014  the 
Mercer  Foundation  had  distributed  $70  million  in  donations,  mainly  to  extremist  right- 

76 


Complaint 


Case  # 


Case  3:19-cv-04591-SK  Document  1  Filed  08/07/19  Page  80  of  91 


wing  hate  groups,  a  prime  example  of  the  utter  destruction  of  the  American  foundational 
principle,  “one  person,  one  vote.” 

360.  Robert  Mercer,  a  reclusive,  anti-establishment,  extremist  right-wing  political 
operative  used  his  wealth  and  Cambridge  Analytica  to  help  candidate  Trump  win  the 
presidency  in  return  for  future  presidential  favors. 

361 .  Mercer  became  co-CEO  of  hedge  fund  Renaissance  Technologies  LLC  in 
November  2009  just  as  the  federal  government  began  cracking  down  on  abuses  that  had 
contributed  to  the  nation’s  worst  financial  crisis  since  the  Great  Depression. 

362.  In  2010,  the  IRS  issued  a  public  memorandum  warning  hedge  funds  and  banks 
about  using  “basket  options.”  The  memo  said  that  hedge  funds  should  pay  taxes  at  a 
capital  gains  rate. 

363.  Some  hedge  funds  and  banks  stopped  using  “basket  options,”  but  not  Mercer’s 
Renaissance. 

364.  In  July  2014,  Senator  Carl  Levin,  Chairman  of  the  Senate  Investigations 
Subcommittee  and  Senator  John  McCain,  issued  a  report  accusing  Renaissance  of  a  giant 
tax  dodge  on  hundreds  of  millions  of  option  trades  and  in  2015  the  IRS  issued  a  notice  to 
Renaissance,  stating  that  the  world’s  most  profitable  hedge  fund  owed  at  least  6.8  billion 
dollars  in  back  taxes. 

365.  Since  then,  Mercer  has  mounted  relentless  assaults  on  the  IRS,  on  President 
Barack  Obama,  on  the  SEC,  on  the  Federal  Reserve  Bank,  on  the  DOJ,  on  moderate 
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members  of  Congress,  on  presidential  candidate  Hillary  Clinton  and  on  governmental 
regulations  and  agencies  that  negatively-impact  Mercer’s  energy  investments. 

366.  Mercer  has  called  the  Civil  Rights  Act  of  1964  a  mistake  and  has  voiced  disdain 
for  other  federal  measures  to  protect  the  rights  of  African  Americans  and  other 
minorities. 

367.  The  Mercer  foundation  gave  nearly  $11  million  from  201 1  to  2014  to  the  Media 
Research  Center,  an  advocacy  group  whose  “sole  mission,”  according  to  its  website, 

“. .  .is  to  expose  and  neutralize  the  propaganda  arm  of  the  Left:  the  national  news  media.” 

368.  According  to  data  from  the  Center  for  Responsive  Politics,  Mercer  donated  more 
than  $22  million  to  extremist  right  wing  political  candidates,  while  advocating  the 
abolition  of  the  IRS  and  much  of  the  federal  government. 

369.  By  2016,  Mercer  was  the  leading  multi-million-dollar  Republican  donor  to 
candidate  Trump,  which  helped  give  Mercer  a  leading  voice  in  the  politics  that  have 
impacted  all  Americans  and  America’s  role  as  a  world  leader. 

370.  Some  of  Mercer’s  projects  sought  to  unseat  his  Republican  moderates,  such  as 
Senator  John  McCain,  who  became  the  target  of  negative  ad  campaigns  during  the  2016 
U.S.  primary  presidential  election  cycle  and  also  a  target  of  extremely  disrespectful 
Trump  tantrums  that  declared  that  McCain  was  no  hero  because  he  was  captured  and 
draft  dodger  Trump  said  he  didn’t  like  soldiers  that  were  captured. 

371 .  Meanwhile,  Mercer4 s  daughter  Rebekah  accumulated  so  much  political  clout  she 
has  been  credited  with  influencing  Trump’s  choices  of  several  top  advisors  and 
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appointees,  including  Steve  Bannon,  Jeff  Sessions,  Kellyanne  Conway  and  General 
Michael  Flynn,  now  a  convicted  felon. 

372.  In  January  20 1 7,  Rebekah  Mercer  attended  a  private  meeting  in  which  she  had 
secret  communications  with  Jay  Clayton,  who  the  President  had  appointed  to  chair  the 
SEC,  the  agency  that  regulates  hedge  funds. 

373 .  The  Mercers’  struggle  with  the  IRS  didn’t  end  with  Trump’s  election  and 
Clayton’s  appointment. 

374.  Richard  Painter,  chief  White  House  ethics  adviser  under  President  George  W. 
Bush,  said  the  optics  surrounding  the  Mercers’  political  connections  and  the  IRS  case 
against  Renaissance  “are  terrible.  The  guy’s  [Mercer]  got  a  big  case  in  front  of  the  IRS,” 
said  Painter,  now  a  University  of  Minnesota  law  professor  who  is  also  vice  chairman  of 
Citizens  for  Responsibility  and  Ethics  in  Washington.  “He’s  trying  to  put  someone  in 
there  who’s  going  to  drop  the  case.  Is  President  Trump  going  to  succumb  to  that  or  is  he 
not?  Are  we  going  to  have  a  commissioner  of  the  IRS  who  aggressively  enforces  the  law 
and  takes  good  cases  to  Tax  Court  or  (somebody  who)  just  throws  away  tax  cases  so 
billionaires  don’t  have  to  pay  their  taxes  and  the  rest  of  us  can  pay  more  taxes?” 

375.  On  March  29,  2017,  at  least  30  conservative  leaders,  including  a  Heritage 
Foundation  representative,  converged  on  the  White  House  for  an  off-the-record  meeting 
with  White  House  officials  and  pressed  for  a  range  of  agendas,  especially  urging  the 
firing  of  IRS  officials  not  sympathetic  to  the  tax  travails  of  Mercer’s  Renaissance  hedge 
fund. 
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376.  The  meeting  was  organized  by  White  House  aide  Paul  Teller,  who  worked  with 
Rebekah  Mercer  on  Senator  Cruz’s  failed  2016  Republican  presidential  primary 
campaign,  an  effort  that  Mercer  backed  with  $13.5  million  in  donations  to  an 
independent,  pro-Cruz  super  PAC  freed  of  the  usual  contribution  limits. 

377.  Robert  Mercer  then  gave  millions  of  dollars  more  to  the  super  PAC  when  it 
began  to  support  candidate  Trump. 

VII.  SERIOUS  DANGERS  INHERENT  IN  FB’S  UNREGULATEDAND 
UNACCOUNTABLE  MONOPOLISTIC  BUSINESS  MODEL 

378.  Plaintiffs  repeat  and  re-allege  all  preceding  and  following  paragraphs  as  if  fully  set 
forth  herein. 

379.  FB  has  falsely  promoted  itself  to  its  billions  of  registered  users  and  non-users  as 
an  egalitarian  “social  networking  platform”  when  in  fact  FB  is  an  authoritarian  Internet- 
based  online  advertising  platform  from  which  FB  yearly  derives  over  $60billion  in 
advertising  and  advertising  related  revenue. 

FB  uses  its  monopoly  market  and  political  power  to  advance  its  self-interested  objectives 
without  concern  to  the  harm  it  is  causing. 

380.  Recently,  the  FTC  and  FB  agreed  on  a  $5  billion  fine  that  would  settle  the  FTC's 
investigation  into  FB’s  user  privacy  violations  and  other  unlawful  conduct. 

381 .  FB  reported  $15  billion  in  revenue  in  a  recent  quarter,  so  the  $5  billion  fine  would 
amount  to  a  mere  one  month's  revenue. 
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382.  The  FTC  voted  3-2  to  approve  the  settlement  this  week,  with  three  yes  votes  from 
Republican  commissioners  and  two  no  votes  from  Democrats,  the  Wall  Street  Journal 
reported  today..  Democrats  on  the  commission  were  "pushing  for  tougher  oversight,"  the 
Journal  reported. 

383.  "The  matter  has  been  moved  to  the  Justice  Department’s  civil  division,  and  it  is 
unclear  how  long  it  will  take  to  finalize,"  the  Journal  reported.  Justice  Department 
reviews  are  part  of  the  FTC’s  procedure  but  typically  don’t  change  the  outcome  of  an 
FTC  decision." 

384.  The  settlement  is  expected  to  include  other  government  restrictions  on  how  FB 
treats  user  privacy. 

385.  FTC  officials  have  also  discussed  whether  to  hold  Zuckerberg  and  Sandberg 
personally  accountable,  including  criminal  charges. 

386.  The  FTC  investigation  began  in  March  2018  after  revelations  that  up  to  87  million 
users'  information  was  improperly  shared  with  Cambridge  Analytica,  a  political 
consulting  firm  that  work  on  the  2016  Trump  Campaign.  The  investigation  focused  on 
whether  FB  violated  the  terms  of  its  201 1  settlement  with  the  FTC,  which  prohibited  FB 
from  misrepresenting  the  privacy  or  security  of  user  information  and  required  FB  to  get 
consumers'  express  consent  before  making  changes  that  override  their  privacy  settings. 

387.  Two  U.S.  Senators  found  the  settlement  lacking.  "This  reported  $5  billion  penalty 
is  barely  a  tap  on  the  wrist,  not  even  a  slap,"  Senator  Richard  Blumenthal  said  in  a 
statement.  "Such  a  financial  punishment  for  purposeful,  blatant  illegality  is  chump 
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change  for  a  company  that  makes  tens  of  billions  of  dollars  every  year.  Will  FB  be 
compelled  to  alter  its  present,  systematic  abuse  of  privacy?  Based  on  the  reported 
settlement,  the  answer  is  sadly,  no." 

388.  Senator  Ron  Wyden  agreed.  "Despite  Republicans’  promises  to  hold  big  tech 
accountable,  the  FTC  appears  to  have  failed  miserably  at  its  best  opportunity  to  do  so," 
Wyden  said.  "No  level  of  corporate  fine  can  replace  the  necessity  to  hold  Zuckerberg 
personally  responsible  for  the  flagrant,  repeated  violations  of  Americans'  privacy.  That 
said,  this  reported  fine  is  a  mosquito  bite  to  a  corporation  the  size  of  FB." 

389.  FB  has  willfully  failed  to  enforce  its  contractual  promise  to  Plaintiffs  to  protect  the 
privacy  of  their  FB  user’  information  and  that  of  their  FB  “Friends”  by  selling  and  trading 
that  information  to  third  parties  and  by  allowing  still  other  third  parties  free  , unfettered 
access  to  that  information  to  use  in  any  way  that  they  see  fit. 

390.  Hundreds  of  millions  of  Americans  use  the  FB  platform  for  countless  purposes 
including  advertising  their  goods  and  services,  as  an  adjunct  or  alternate  to  email,  to  view 
and/or  promote  news  and  to  broadcast  their  personal  opinions  on  every  conceivable  topic. 

391.  FB  denied  Plaintiffs  unfettered  access  to  their  FB  accounts  for  no  expressed 
legitimate  reason  but  continued  to  allow  their  FB  “Friends”  and  others  to  send  them 
messages  and  continued  to  amass,  sell,  trade,  supplement  and  aggregate  their  FB  user’ 
information. 

392.  On  June  29,  2018,  FB  provided  written  responses  to  seven  hundred  questions  put 
to  them  by  the  U.S.  House  of  Representatives.  In  providing  answers  to  these  questions,  FB 
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identified  certain  of  the  types  of  information  its  collects,  stores,  supplements,  aggregates, 
sells  and  trades,  including: 

393.  •  Device  attributes  such  as  operating  systems,  hardware  and  software  versions, 
battery  level,  signal  strength,  available  storage  space,  browser  type,  application  and  file 
names  and  types,  and  plugins. 

394.  •  Device  operation  information  and  behaviors  performed  on  the  device,  such  as 
whether  a  window  is  foregrounded  or  backgrounded  and  mouse  movements  (used  to 
distinguish  humans  from  bots). 

395.  •  Unique  device  IDs,  and  other  identifiers,  such  as  from  games,  applications  and 
accounts  people  use,  and  family  device  IDs  (or  other  identifiers  unique  to  FB  products 
associated  with  the  same  device  or  account). 

396.  •  Device  signals  and  information  about  nearby  Wi-Fi  access  points,  beacons,  and 
cell  towers. 

397.  •  Information  from  device  settings  such  as  unfettered  access  to  FB  user’  GPS 
locations,  cameras  and  photos. 

398.  •  Network  and  connection  such  as  the  name  of  user’s  mobile  operator  or  ISP, 
language,  time  zone,  mobile  phone  number,  Internet  provider  address,  connection  speed 
and,  in  some  cases,  information  about  other  devices  that  are  nearby  or  on  user’s  network, 
so  we  can  do  things  like  help  people  stream  a  video. 

399.  •  Cookie  information  stored  on  a  FB  user’s  device,  including  cookie  IDs  and 
settings. 
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400.  FB  has  willfully  and  unlawfully  allowed  unfettered  access  to  and  sold  or  traded  to 
all  sorts  of  third  parties,  application  developers  and  device  manufacturers  unfettered  access 
to  Plaintiffs  FB  user’  information  and  that  of  their  FB  “Friends”  while  denying  Plaintiffs 
the  ability  to  change  or  delete  that  information. 

401.  An  example  of  FB’s  failure  to  enforce  its  contractual  promise  to  protect  from 
access  and  use  and  sale  by  third  parties  came  to  light  when  it  was  discovered  in  the  mid- 
2010s  that  FB  allowed  a  Cambridge  University  researcher  unfettered  access  to  FB  user’ 
information  from  nearly  a  hundred  million  FB’s  users  and  their  FB  “Friends,”  one  of  many 
FB  willful,  reckless  and  unlawful  failures  to  protect  the  privacy  of  FB  user’  information. 

402.  In  2014,  that  Cambridge  University  researcher  entered  into  a  contract  with  Robert 
Mercer  controlled  Cambridge  Analytica  for  the  sale  of  the  researcher’s  plundered  FB  user’ 
information  for  approximately  $$800,000. 

403.  The  plundered  FB  user’  information  was  then  repeatedly  used  by  FB,  the  Trump 
Campaign,  Russian  operatives,  Cambridge  Analytica,  Robert  Mercer  and  others  in  a 
successful  effort  to  sabotage  the  primary  and  general  2016  U.S.  presidential  elections  in 
favor  of  candidate  Trump. 

404.  The  unlawful  and  possibly  treasonous  conduct  of,  FB,  the  Trump  Campaign, 
Russian  operatives,  Cambridge  Analytica,  Robert  Mercer  and  others  could  have  been 
thwarted  had  if  FB  had  denied  the  Cambridge  University  researcher’s  application  to  FB  to 
access  and  use  FB-stored  user’  information. 
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405.  Cambridge  Analytica  received  millions  of  dollars  from  the  Trump  Campaign  and 
other  2016  U.S.  presidential  candidates  for  the  use  of  its  plundered  FB  user’  information 
and  the  technical  services  of  Cambridge  Analytica  employees  who  became  embedded 
along  with  FB  employees  in  Trump  Campaign  information  processing  facilities  and 
assisted  in  the  Trump  Campaign’s  efforts  to  rig  U.S.  2016  presidential  elections  in  favor 
of  Trump. 

406.  FB  also  granted  licenses  to  Blackberry  and  at  least  52  other  device  manufacturers 
that  allowed  the  device  manufacturers  to  integrate  their  devices  with  FB. 

407.  These  integrations  gave  the  device  manufacturers  through  applications  like 
Blackberry’s  “HUB  unfettered  access  to  unlimited  quantities  of  FB  user’  information, 
leaving  FB  users  with  no  control  over  how  their  information  was  accessed  and  then  used 
or  sold  or  traded. 

408.  Even  if  FB  users  had  denied  such  access,  their  denials  were  easily  circumvented 
with  the  full  knowledge,  consent  and  encouragement  of  FB. 

409.  FB’s  willful  misrepresentations  to  its  users  and  failure  to  inform  their  users, 
including  Plaintiffs  that  their  information  was  being  compromised  willfully  and  recklessly 
deceived  Plaintiffs  and  caused  them  monetary  and  emotional  harm. 

410.  Using  the  plundered  FB  user’  information  of  nearly  a  hundred  million  Americans, 
including  that  of  the  Plaintiffs,  and  thousands  of  emails  plundered  from  the  Democratic 
National  Committee  (“DNC”)  and  the  Democratic  Congressional  Campaign  Committee 
(“DCCC”),  FB,  working  in  concert  with  Russian  intelligence  agents  and  operatives,  the 
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Trump  Campaign,  Cambridge  Analytic,  Robert  Mercer  and  others  successfully  rigged  the 
2016  U.S.  presidential  elections  in  favor  of  candidate  Trump. 

411.  Zimmerman  is  not  a  public  official,  or  public  figure,  or  a  candidate  for  public  office, 
or  a  campaign  official,  or  a  personal  advisor  to  any  political  candidate  and  did  not  expect 
his  FB  user’  information  or  that  of  his  FB  “Friends”  would  become  available  to  anyone 
who  wanted  it  to  use  for  any  purpose  whatsoever. 

412.  To  repeat,  FB  contractually  promised  Plaintiffs  and  billions  of  other  registered  FB 
users  that  their  FB  user’  information  would  be  protected  from  unauthorized  access  and  use 
by  third  parties. 

413.  Approximately  60%  of  Americans  are  or  have  been  registered  FB  users. 

414.  FB  has  profited  by  tens  of  billions  of  dollars  selling  and  trading  FB  user’ 
information  and  selling  ads  that  were  strategically  targeted  to  exploit  the  personality  traits 
and  other  personal  private  information  of  Zimmerman  and  millions  of  other  FB  users. 

415.  The  Trump  Campaign  spent  at  least  $44  million  on  strategically  targeted  FB  ads 
from  June  2016  to  November  2016  and  continues  such  targeted  messaging  on  the  FB 
platform  in  its  2020  presidential  reelection  campaign. 

416.  Strategic  ad  targeting  was  used  by  Trump  supporter  and  major  donor  Robert  Mercer 
to  help  sabotage  the  2016  U.S.  presidential  election  cycle. 

417.  Robert  Mercer  along  with  the  President’s  former  senior  advisor  Steve  Bannon, 
controlled,  Breitbart  News,  a  publication  that  advances  what  the  New  York  Times  calls 
'"hate  news”  (a  toxic  mix  of  lies,  white-supremacist  content,  and  bullying  that  have  inspired 
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attacks  on  Muslims  and  their  mosques,  gay  people,  women,  African  Americans  and  their 
churches,  Jewish  people  and  their  synagogues  and  others). 

418.  In  2016,  employees  of  FB,  the  Trump  Campaign,  Cambridge  Analytica  and  others 
joined  Trump’s  senior  advisor  Jared  Kushner  in  a  San  Antonio-based  information 
processing  facility  and  deployed  the  voter  profiles  of  millions  of  Americans  plundered 
from  FB  to  successfully  sabotage  the  2016  U.S.  presidential  elections. 

419.  Kushner  has  been  under  investigation  for  his  undisclosed  contacts  with  Russian 
ambassador  Sergey  Kislyak,  the  CEO  of  a  U.S.  sanctioned  Russian  bank  and  others. 

420.  FB  announced  that  about  25%  of  the  ads  purchased  by  Russian  operatives  from  FB 
during  the  2016  U.  S.  presidential  elections  were  “geographically  targeted,"  meaning  that 
they  played  primarily  in  swing  states. 

421 .  In  a  2016  post-election  interview,  Kushner  told  Forbes  magazine  that  he  had  been 
keenly  interested  in  FB's  microtargeting  capability.  “I  called  somebody  who  works  for  one 
of  the  technology  companies  that  I  work  with,  and  I  had  them  give  me  a  tutorial  on  how  to 
use  FB  micro-targeting,”  Kushner  said.  Adding,  “We  brought  in  Cambridge  Analytica.  I 
called  some  of  my  friends  from  Silicon  Valley  who  were  some  of  the  best  digital  marketers 
in  the  world,"  Kushner  said,  "And  I  asked  them  how  to  scale  this  stuff .  .  .  We  basically 
had  to  build  a  $400  million  [voter  targeting]  operation  with  1,500  people  operating  in  50 
states.” 

422.  By  willfully,  recklessly  and  for  profit  abdicating  its  contractual  responsibility  to 
protect  the  privacy  of  Plaintiff  s  FB  user’  information  from  unauthorized  and/or  unlawful 
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invasions  of  his  privacy,  FB  willfully  and  recklessly  allowed  Cambridge  Analytica  and 
numerous  other  third  parties  to  plunder  and  use  for  unlawful  purposes  vast  amounts  of  their 
FB  user’  information  without  FB  user’  consent,  including  Plaintiff’s. 

VIII.  FB’S  USE  OF  ITS  USERS’  INFORMATION  AS  AN  EXTREMELY 
VALUABLE  ASSET  WHEN  NEGOTIATING  DEALS  WITH  THIRD 
PARTIES  TO  GAIN  UNFETTERED  ACCESS  TO  IT 

423 .  Plaintiffs  repeat  and  re-allege  all  preceding  and  following  paragraphs  as  if  fully 
set  forth  herein. 

424.  According  to  some  4,000  pages  of  leaked  FB  documents  spanning  201 1  to  2015 
obtained  by  NBC  News,  Zuckerberg  supervised  plans  to  consolidate  FB’s  ability  to  out- 
compete  competitors  by  treating  its  FB  user’s  information  as  an  extremely  valuable  asset 
when  negotiating  deals  to  gain  unfettered  access  to  it  with  third  parties,  while  publicly 
proclaiming  to  be  protecting  the  privacy  of  that  very  same  FB  user’  information. 

425.  The  leaked  documents,  which  include  emails,  webchats,  presentations, 
spreadsheets  and  meeting  summaries,  show  how  FB,  along  with  FB’s  board  of  directors 
and  management  team,  found  ways  to  tap  FB’s  trove  of  FB  user’  information,  including 
information  about  FB  “Friends,”  relationships,  photos  and  videos,  as  leverage  over 
companies  it  had  partnered  with. 

426.  In  some  cases,  FB  would  reward  favored  FB  partnered  companies  by  giving  them 
unfettered  access  to  the  information  of  its  users.  In  other  cases,  it  would  deny  user- 
information  unfettered  access  to  rival  companies. 
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427.  For  example,  FB  gave  Amazon  extended  unfettered  access  to  FB  user’ 
information  because  it  was  spending  money  on  FB  advertising  and  partnering  with  FB  on 
the  launch  of  its  “Fire”  smartphone. 

428.  FB  also  discussed  cutting  off  unfettered  access  to  FB  user’  information  for  a 
messaging  application  that  was  viewed  by  FB  executives  as  a  too  popular  competitor. 

429.  Private  communication  between  users  is  “increasingly  important,”  Zuckerberg 
said  in  a  2014  New  York  Times  interview.  “Anything  we  can  do  that  makes  people  feel 
more  comfortable  is  really  good.”  But  leaked  FB  documents  show  that  secretly,  contrary 
to  FB’s  public  statements,  FB  conjured  up  ways  to  require  third  party  applications  to 
compensate  FB  for  unfettered  access  to  its  FB  user’s  information,  including  direct 
payment,  advertising  spending  and  information-sharing  arrangements. 

430.  Ultimately  FB  decided  not  to  sell  the  information  directly  but  rather  to  dole  it  out 
to  application  developers  who  were  considered  personal  friends  of  Zuckerberg  and/or 
Sandberg  or  who  spent  big  money  on  FB  ads  like  Amazon  and/or  shared  their  own 
customer  information  with  FB. 

43 1 .  About  400  of  the  4,000  leaked  FB  pages  of  the  leaked  documents  had  been 
previously  been  disclosed.  However,  the  previously  undisclosed  leaked  documents 
convey  the  most  comprehensive  insight  into  FB’s  deceptive  and  unlawful  activities  while 
the  company  struggled  to  adapt  to  the  rise  of  smartphones  following  its  scratchy  debut  as 
a  public  company  in  20 1 2 . 
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432.  The  thousands  of  previously  undisclosed  FB  leaked  documents  were 
anonymously  leaked  to  the  British  investigative  journalist  Duncan  Campbell,  who  shared 
them  with  a  handful  of  media  organizations  such  as  NBC  News,  Computer  Weekly  and 
Siiddeutsche  Zeitung. 

433.  FB  has  not  questioned  the  authenticity  of  the  leaked  FB  documents,  each  of  which 
was  presented  as  evidence  in  a  California  court  case  between  FB  and  a  startup  company 
called  Six4Tbree  that  sued  FB  in  2015  after  FB  announced  plans  to  cut  off  their 
unfettered  access  to  FB  user’  information. 

434.  The  Six4Three’s  computer  application,  called  Pikinis,  was  launched  in  2013  and 
relied  on  FB  user’  information  to  find  photos  of  persons  clothed  only  in  bathing  suits. 

435.  According  to  the  Wall  Street  Journal,  FB  has  admitted  that  it  considered  charging 
for  unfettered  access  to  FB  user’  information,  but  found  there  were  better  ways  to 
monetize  unfettered  access  to  its  users’  information. 

436.  In  a  preliminary  decision,  the  judge  in  the  Six4Three  case  found  “evidence  of 
FB’s  fraudulent  conduct. 

43  7.  The  leaked  documents  show  that  FB’s  plans  to  sell  unfettered  access  to  FB  user’ 
information  received  support  from  FB’s  most  senior  executives,  including  CEO 
Zuckerberg,  COO  Sheryl  Sandberg,  Chief  Product  Officer  Chris  Cox  and  Vice  President 
of  growth  Javier  Olivan. 
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438.  When  in  20 15  FB  discontinued  unfettered  access  to  FB  user’  information  for 
certain  third  parties,  that  FB  action  contributed  to  the  decline  of  Pikinis,  Lulu,  and 
Beehive . 

439.  One  of  the  most  striking  examples  of  FB’s  willful  misconduct  to  emerge  from  the 
leaked  documents  is  the  way  that  FB  user’  information  was  traded  to  squeeze  money  or 
shared  information  from  third  party  application  developers. 

440.  In  the  wake  of  the  Cambridge  Analytica  scandal  and  rising  awareness  of  the 
Six4Three  lawsuit,  FB  attempted  to  spin  the  modest  changes  it  made  to  its  platform  in 
2014  and  2015  as  major  events  and  as  being  driven  by  FB  concerns  over  user  privacy. 

441 .  However,  the  leaked  documents  show  that  protecting  FB  user’  privacy  was  not  a 
major  concern  for  FB,  and  the  issue  was  rarely  discussed  in  the  thousands  of  pages  of 
leaked  emails  and  meeting  summaries. 

442.  When  FB  user’  privacy  was  mentioned,  it  was  in  the  context  of  how  FB  can  use  it 
as  a  public  relations  strategy  to  soften  the  blow  of  the  sweeping  changes  to  application 
developer’s  unfettered  access  to  FB  user’  information.  The  leaked  documents  include 
several  examples  suggesting  that  these  changes  were  designed  to  cement  FB’s  power  in 
the  marketplace,  not  to  protect  users. 

443.  Early  on,  FB  recognized  that  working  with  and  helping  third  party  application 
developers  with  free  unfettered  access  to  FB  user’  information,  would  make  FB  more 
interesting  and  accelerate  FB’s  growth. 
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444.  Beginning  in  early  2010,  FB  created  tools  that  allowed  makers  of  computer  games 
and  other  applications  to  connect  with  FB  users  so  that  FB  users  would  spend  more  time 
using  the  FB  platform  and  managed  to  achieve  this  through  its  Graph  API  (Application 
Programming  Interface)  that  allowed  software  programs  to  interact  with  each  other. 

445.  In  FB’s  case,  this  meant  that  third  party  applications  such  as  online  computer 
games  could  post  updates  on  FB  user’  profiles,  which  would  be  seen  by  computer  game 
player’s  FB  “Friends”  and  tempt  them  to  play  as  well  and  allow  game  creators  to  access 
information  from  FB  users,  including  their  connections  to  FB  “Friends,”  FB  “Likes,” 
locations,  updates,  photos  and  more. 

446.  Graph  API,  and  particularly  the  way  it  let  third  parties  promote  their  products  and 
extract  information  from  a  FB  user’s  “Friends,”  was  a  key  feature  of  FB  that  Six4Three 
and  thousands  of  other  companies  relied  upon. 

447.  However,  a  few  years  later,  FB  decided  the  application  developers  were  getting 
more  value  from  their  unfettered  access  to  FB  user’  information  than  FB  was  getting 
from  the  application  developers. 

448.  Soon  after  FB  sold  a  wee  portion  of  its  stock  to  the  public,  the  rapid  growth  of  the 
cellphones  threatened  FB’s  market  power  and  growth  and  an  internal  FB  presentation 
looking  back  at  this  period  used  the  phrase  “terminal  decline”  to  describe  the  fall  in  FB 
user  engagement. 
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449.  Zuckerberg,  Sandberg  and  other  FB  executives  spent  months  brainstorming  ways 
to  exploit  the  explosive  growth  of  cellphone  use  before  that  explosively  expanding 
market  got  away  from  them. 

450.  One  idea  that  FB  kept  returning  to  was  to  make  money  from  FB’s  application 
developer  partners  by  charging  them  for  unfettered  access  to  FB’s  users  and  their 
information. 

45 1 .  Several  proposals  for  charging  application  developers  for  unfettered  access  to 
FB’s  platform  and  FB  user  information  were  put  forward  in  a  presentation  to  the 
company’s  board  of  directors. 

452.  Among  the  suggestions:  a  fixed  annual  fee  for  application  developers  for 
reviewing  their  applications;  an  access  fee  for  applications  that  requested  FB  user’ 
information;  and  a  charge  for  “premium”  unfettered  access  to  FB  user’  information,  such 
as  a  user  trust  score  or  a  ranking  of  the  strongest  relationships  between  FB  users  and  their 
FB  “Friends.” 

453.  “Today  the  fundamental  trade  is  ‘information  for  distribution,’  whereas  we  want 
to  change  it  to  either  ‘information  for  $’  and/or  ‘$  for  distribution,”’  a  FB  business 
development  director  wrote  in  an  August  2012  internal  email. 

454.  Such  discussions  continued  through  October  2012,  when  Zuckerberg  explained  to 
close  friend  Sam  Lessin  the  importance  of  controlling  third  party  application’s  ability  to 
access  FB’s  user’  information  and  reach  FB  user’s  “Friends”  on  the  FB  platform. 
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455.  Without  that  leverage,  “I  don’t  think  we  have  any  way  to  get  application 
developers  to  pay  us  at  all,”  Zuckerberg  wrote  in  an  email  to  Lessin. 

456.  Then  Zuckerberg  suggested  pursuing  1 00  deals  with  application  developers  “as  a 
path  to  figuring  out  the  real  market  value  of  FB  user’  information  and  then  setting  a 
public  rate  for  application  developers.  ‘The  goal  here  wouldn’t  be  the  deals  themselves,” 
said  Zuckerberg,  “..  .but  that  through  the  process  of  negotiating  with  them  we’d  leam 
what  application  developers  would  actually  pay,  which  might  be  different  from  what 
they’d  say  if  we  just  asked  them  about  the  value,  and  then  we’d  be  better  informed  on  our 
path  to  set  a  public  rate.” 

457.  As  usual,  Zuckerberg  ignored  the  potential  privacy  risks  associated  with  FB’s  user 
information-sharing  arrangements.  “I’m  generally  skeptical  that  there  is  as  much 
information  leak  strategic  risk  as  you  think,”  he  wrote  in  the  email  to  Lessin.  “I  think  we 
leak  info  to  developers,  but  I  just  can’t  think  of  any  instances  where  that  information  has 
leaked  from  developer  to  developer  and  caused  a  real  issue  for  us.”  But,  the  following 
year,  a  privacy  defect  affecting  a  third  party  application  developers  created  precisely  that 
sort  of  issue  for  FB,  as  depicted  in  a  panicky  chatlog  between  Michael  Vernal,  who  was 
FB’s  director  of  engineering,  and  other  senior  FB  employees. 

458.  Apparently,  Zuckerberg’ s  private  communications  were  leaked  from  FB  to  an 
external  application  in  an  unexpected  way. 
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459.  V emal  said  that  it  could  have  been  near-fatal  for  the  FB  if  Zuckerberg  had 
accidentally  disclosed  earnings  ahead  of  time  because  a  FB  sanctioned  application  had 
intruded  on  his  privacy. 

/ 

460.  “Holy  crap,”  replied  Avichal  Garg,  then  director  of  product  management.  “DO 
NOT  REPEAT  THIS  STORY  OFF  OF  THIS  THREAD,”  added  Vernal.  “I  can’t  tell  you 
how  terrible  this  would  have  been  for  all  of  us  had  this  not  been  caught  quickly.” 

461.  In  late  November  2012,  Zuckerberg  sent  along  email  to  FB’s  senior  executives 
stating  FB  should  not  charge  application  developers  for  unfettered  access  to  FB  user’ 
information. 

462.  However,  Zuckerberg  also  said  that  unfettered  access  to  FB  user’  information 
should  be  contingent  on  the  application  developers  sharing  all  of  the  “social  content” 
generated  by  their  applications  with  FB,  something  Zuckerberg  called  “full  reciprocity.” 

463 .  The  existing  arrangement,  where  application  developers  weren’t  required  to  share 
their  information  with  FB,  might  be  “good  for  the  world,  but  it’s  not  “good  for  us,” 
Zuckerberg  wrote  in  an  email  and  added  that  “...though  FB  could  charge  application 
developers  to  access  FB  user’  information,  FB  stood  to  benefit  more  from  requiring 
application  developers  to  compensate  FB  by  sharing  their  customer  information  and  by 
buying  advertising  on  FB’s  platform. 

464.  FB  began  making  deals  with  some  of  its  most  valued  partners,  including  dozens 
of  application  developer  friends  of  Zuckerberg  and  Sandberg  by  “whitelisting”  their 
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unfettered  access  to  FB  user’  information  while  restricting  unfettered  access  to 
application  developers  FB  determined  were  competitors. 

465.  These  FB  negotiated  information  access  deals  with  key  FB  business  partners, 
including  Tinder,  Sony,  Amazon  and  Microsoft,  required  sweeping  changes  to  the  FB 
platform,  changes  FB  planned  to  announce  at  its  annual  application  developer  conference 
in  April  2014. 

466.  in  June  20131,  leaked  FB  documents  described  that  Amazon  received  special 
treatment  for  the  launch  of  a  group  gifting  product,  despite  the  fact  that  it  competed  with 
one  of  FB’s  own  products. 

467.  “Remind  me,  why  did  we  allow  them  [Amazon]  to  do  this?  Do  we  receive  any  cut 
of  purchases?”  Chris  Daniels,  then  FB’s  director  of  business  development,  asked  in  an 
email. 

468.  “No,  but  Amazon  is  an  advertiser  and  supporting  this  with  advertisements  ...  and 
working  with  us  on  deeper  integrations  for  the  Fire,”  Amazon’s  smartphone,  replied 
Jackie  Chang,  who  worked  with  FB’s  strategic  business  partners. 

469.  Amazon  released  a  statement  to  NBC  News:  “Amazon  uses  publicly  available 
APIs  provided  by  FB  in  order  to  enable  FB  experiences  for  our  products  and  only  uses 
information  in  accordance  with  our  privacy  policy.”  An  admission  that  Amazon  had 
collected  and  stored  FB  user’  information  for  its  own  use  and  profit  and  that  that 
information  was  now  subject  to  Amazon’s  customer  information  policies. 
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470.  The  applications  of  application  developers  that  were  not  considered  “strategic 
partners”  got  less  favorite  nation  status  treatment  from  FB. 

471.  In  a  March  2013  discussion,  Justin  Osofsky,  then  director  of  FB  platform  business 
partnerships,  described  restricting  the  MessageMe  application  from  unfettered  access  to 
FB  user’  information  because  it  had  grown  too  popular  and  could  compete  with  FB 
messages. 

472.  Osofsky  asked  his  staff  to  see  if  any  other  messenger  applications  have  “hit  the 
growth  team’s  radar  recently.”  “If  so,  we'd  like  to  restrict  them  at  the  same  time  to  group 
this  into  one  press  cycle,"  he  wrote  in  an  email. 

473.  The  FB  driven  deal  negotiations  created  confusion  among  FB’s  business  partners 
who  had  grown  accustomed  to  unfettered  access  to  FB  user’  information. 

474.  “We  gave  a  bunch  of  stuff  for  free  historically  (information,  distribution)  and  now 
we’re  making  you  ‘pay’  for  it  via  reciprocal  value,”  Vernal,  director  of  FB  engineering, 
wrote  in  an  email  in  June  2013.  He  added,  “The  confusing  thing  here  is  that  we  haven’t 
really  announced  these  changes  publicly/broadly  yet.” 

475.  Some  FB  employees  were  unhappy  about  this  direction,  particularly  the  way  FB 
appeared  to  be  blocking  competitors  from  unfettered  access  to  FB  user’  information. 

476.  Following  is  an  extract  from  a  December  2013  chatlog  between  several  FB  senior 
engineers  talking  about  the  changes  to  application  developers’  unfettered  access  to  FB 
user’  information: 
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477.  Bryan  Klimt:  “So  we  are  literally  going  to  group  applications  into  buckets  based 
on  how  scared  we  are  of  them  and  give  them  different  APIs?  ...  So,  the  message  is,  ‘if 
you’re  going  to  compete  with  us  at  all,  make  sure  you  don’t  integrate  with  us  at  all’?  I’m 
just  dumbfounded.” 

478.  Kevin  Lacker:  “Yeah  this  is  complicated.” 

479.  David  Poll:  “More  than  complicated,  it’s  sort  of  unethical.” 

480.  When  it  came  to  announcing  the  sweeping  changes  at  FB’s  annual  F8  application 
developer  conference  in  April  2014,  members  of  the  communications  team  worked  with 
Zuckerberg  to  craft  a  narrative  around  FB  user’  trust,  not  competition  or  profitability. 

481.  In  a  March  2014  email  discussing  Zuckerberg’s  keynote  speech  at  FB’s  annual  F8 
application  developer  conference,  where  he  was  due  to  announce  the  removal  of 
application  developer’s  unfettered  access  to  FB  “Friends’”  information,  Jonny  Thaw,  a 
FB  director  of  communications,  wrote  that  it  “may  be  a  tough  message  for  some 
application  developers  as  it  may  inhibit  their  growth.” 

482.  One  idea  that  came  up  was  talking  in  the  keynote  about  some  of  the  trust  changes 
we’re  making  on  FB  itself.  So,  the  message  would  be:  ‘trust  is  really  important  to  us,  on 
FB  we’re  doing  A,  B  and  C  to  help  people  control  and  understand  what  they’re  sharing 
and  with  platform  applications  we’re  doing  D,  E  and  F.  If  that  doesn’t  work,”  he  added, 
“we  could  announce  some  of  FB’s  trust  initiatives  in  the  run  up  to  F8  to  make  the 
changes  for  application  developers  seem  more  natural.” 
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483.  FB  user  trust  was  crucial  when  Zuckerberg  delivered  his  keynote  speech  at  the  F8 
conference  on  April  30,  2014,  where  Zuckerberg  said:  “Over  the  years,  one  of  the  things 
we’ve  heard  over  and  over  again  is  that  people  want  more  control  over  how  they  share 
their  information,  especially  with  applications,  and  they  want  more  say  and  control  over 
how  applications  use  their  information,”  he  told  the  audience  of  journalists  and 
application  developers.  “And  we  take  this  really  seriously  because  if  people  don’t  have 
the  tools  they  need  to  feel  comfortable  using  your  applications,  that’s  bad  for  them  and 
that’s  bad  for  you.” 

484.  But  despite  FB’s  purported  focus  on  user  privacy,  FB  staff  member  emails 
described  confusion  over  the  way  third  party  applications  could  override  user’s  privacy 
settings. 

485.  Even  if  FB  users  locked  down  their  account  so  that  their  photos  and  other  FB 
user’  information  were  visible  to  “only  me,”  those  photos  were  still  accessible  by  third 
parties. 

486.  In  April  20 1 5,  Connie  Y ang,  a  FB  product  designer,  told  her  colleagues  that  she’d 
discovered  applications  collecting  FB  profile  information  she  had  marked  as  “only  me” 
and  displaying  it  to  “both  you  and  other  people  using  that  application.” 

487.  Even  though  FB  eventually  decided  against  charging  application  developers 
directly  for  unfettered  access  to  FB  user’  information,  one  of  the  biggest  threats  FB  now 
faced  was  not  competition  from  application  developers,  but  rather  from  federal  antitrust 
regulation. 
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488 .  Eventually,  the  FTC  announced  a  task  force  to  monitor  anti-competitive  behavior 
in  the  technology  industry  to,  in  the  words  of  FTC  chair  Joseph  Simons,  “...ensure 
consumers  benefit  from  free  and  fair  competition.” 

489.  Congressional  lawmakers  started  pressuring  the  FTC  to  investigate  FB  for 
antitrust  violations. 

490.  David  Cicilline,  chairman  of  the  House  Judiciary  Antitrust  Subcommittee,  wrote 
in  a  New  York  Times  op-ed:  .”FB  appears  to  have  used  its  [market]  dominance  to  cripple 
other  competitive  threats  by  cutting  them  off  from  its  massive  network.” 


49 1 .  Trying  to  appease  Congress  and  the  FTC,  a  Zuckerberg  op-ed  appeared  in  the 
Washington  Post  in  March  2018  calling  for  some  regulation  in  such  areas  as  election 
sabotage,  but  not  antitrust  punishment. 

492.  Ashkan  Soltani,  a  privacy  expert  and  former  FTC  chief  technologist,  said  that 
Zuckerberg  is  approaching  the  looming  threat  of  regulation  with  “bravado”  and  trying  to 
“leverage  things  for  his  benefit.” 

493.  Zuckerberg  and  other  senior  FB  executives  are  now  being  investigated  by 
Congress,  governmental  regulators  and  prosecutors  domestic  and  foreign,  as  well  as 
defending  against  numerous  private  party  information  privacy  violation  lawsuits. 

494.  In  2018,  Zuckerberg  told  Congress  that  he’s  responsible  for  what  happens  at  FB. 

495.  Senator  Richard  Blumenthal,  who  recently  criticized  the  FTC  for  taking  too  long 

on  the  FB  probe,  wants  the  FTC  to  hold  Zuckerberg  accountable. 
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496.  But  Zuckerberg  is  accountable  to  no  person  and  no  government  regulatory 
agency.  His  power  over  what  FB  does  and  doesn’t  do  is  absolute. 

497.  In  late  May  2019,  FB  investors  voted  overwhelmingly  in  support  of  proposals  to 
fire  Zuckerberg  as  chairman  and  scrap  the  firm's  stock  share  structure.  According  to  the 
results  of  votes  at  FB's  annual  shareholder  meeting  68%  of  outside  investors  want  the 
company  to  hire  an  independent  chairman,  up  from  51%  in  2018. 

498.  Despite  the  vote,  the  management  and  share  restructuring  proposals  did  not  pass 
because  of  Zuckerberg  has  voting  control  by  virtue  of  his  majority  stock  holdings,  which 
means  he  can  and  does  ignore  outside  shareholder  demands. 

499.  "Arrogance  is  not  a  substitute  for  good  corporate  governance,"  said  Michael 
Connor,  who  helped  coordinate  action  among  activist  FB  investors. 

500.  Senator  Blumenthal  told  the  Washington  Post.  “Holding  Mark  Zuckerberg  and 
other  top  FB  executives  personally  at  fault  and  liable  for  further  wrongdoing  would  send 
a  powerful  message  to  business  leaders  across  the  country:  You  [Zuckerberg]  will  pay  a 
hefty  price  for  skirting  the  law  and  deceiving  consumers.” 

501.  In  2018,  in  a  purported  act  of  contrition,  Zuckerberg  told  the  House  Committee  on 
Energy  and  Commerce:  “But  it’s  clear  now  we  [FB  executives]  didn’t  do  enough  to 
prevent  these  tools  [the  FB  platform  and  application  and  algorithms]  from  being  used  for 
harm  as  well.  That  goes  for  fake  news,  foreign  interference  in  elections  and  hate  speech, 
as  well  as  developers  and  data  privacy.  We  didn’t  take  a  broad  enough  view  of  our 
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responsibility  and  that  was  a  big  mistake.  It  was  my  mistake,  and  I’m  sorry.  I  started  FB. 

I  run  it,  and  I’m  responsible  for  what  happens  here  [at  FB].” 

IX.  RUSSIAN  "ACTIVE  MEASURES"  DEPLOYED  TO  SABOTAGE  THE  2016 
U.S.  PRESIDENTIAL  ELECTIONS  USING  THE  FB  PLATFORM  AS  SET 
OUT  IN  THE  SPECIAL  COUNSEL’S  REDACTED  REPORT 

502.  Plaintiffs  repeat  and  re-allege  all  preceding  and  following  paragraphs  as  if  fully 
set  forth  herein.  \ 

503 .  The  first  form  of  Russian  election  sabotage  came  principally  from  the  Russian 
Internet  Research  Agency  (Russian  IRA),  an  organization  funded  by  Yevgeniy 
Viktorovich  Prigozhin  and  companies  he  controlled,  including  Concord  Management  and 
Consulting  LLC  and  Concord  Catering  (collectively  "Concord"). 

504.  The  Russian  IRA  conducted  election  sabotage  operations  using  the  FB  platform 
targeted  at  prospective  U.S.  voters  in  a  successful  effort  to  sow  discord  among  them  that 
resulted  in  in  the  successful  sabotage  of  the  U.S.  2016  presidential  election  cycle. 

505.  These  operations  constituted  "active  measures"  (aKTMBHbMie  eporrprumul),  a 
term  that  refers  to  operations  conducted  by  Russian  security  services  aimed  at  influencing 
the  course  of  international  affairs. 

506.  The  Russian  IRA  and  its  employees  began  operations  targeting  the  U.S.  in  2014, 
possibly  earlier. 

507.  Using  fictitious  U.S.  personas,  Russian  IRA  employees  operated  FB  accounts  and 
FB  group  pages  with  the  intent  to  influence  U.S.  voters.  These  FB  groups  and  FB 
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accounts,  which  addressed  divisive  U.S.  political  and  social  issues,  falsely  claimed  to  be 
controlled  by  U.S.  persons. 

508.  Multiple  Russian  IRA  controlled  FB  groups  and  other  Russian  entities  engaged  in 
similar  “active  measures”  election  sabotage  operations  targeting  prospective  U.S.  voters 

509.  Over  time,  these  Russian  IRA-controlled  FB  accounts  and  other  Internet-based 
platforms  became  a  means  to  reach  ever  larger  U.S.  audiences. 

510.  Also,  Russian  IRA  employees  travelled  to  the  U.S.  in  mid-2014  on  an 
intelligence-gathering  mission  to  obtain  information  and  photographs  for  use  in  their  FB 
and  other  Internet-based  platforms. 

511.  Russian  IRA  employees  posted  derogatory  information  about  a  number  of 
political  candidates  in  the  2016  U.S.  presidential  elections  and  in  early  to  mid-2016 
Russian  IRA  election  sabotage  operations  included  supporting  the  Trump  Campaign  and 
disparaging  Secretary  Clinton’s  campaign. 

512.  The  Russian  IRA  made  various  expenditures  to  carry  out  their  election  sabotage 
activities,  including  buying  political  advertisements  on  FB  and  other  social  media  using 
fictitious  names  of  U.S.  persons  and  entities. 

513.  Some  Russian  IRA  employees  posing  as  U.S.  persons  and  without  revealing  their 
Russian  association  communicated  electronically  with  Trump  Campaign  associates  and 
with  other  political  activists  seeking  to  coordinate  pro-Trump  political  activities. 

514.  By  theend  ofthe2016  U.S.  presidential  elections  the  Russian  IRA  had  reached 
millions  of  U.S.  persons  through  their  FB  and  other  Internet-based  platforms. 
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515.  The  Special  Counsel’s  “active  measures”  investigation  has  resulted  in  criminal 
charges  against  1 3  Russian  nationals  and  three  Russian  entities,  principally  for  conspiracy 
to  defraud  the  U.S.,  in  violation  of  18  U.S.C.  §  371.  See  Volume  I,  Section  V.A,  infra; 
Indictment,  United  States,  v.  Internet  Research  Agency,  etal.,  1  :18-cr-32  (D.D.C.  Feb. 

16,  2018),  Doc.  I  (Internet  Research  Agency  Indictment). 

516.  In  N ovember  20 1 7,  a  FB  executive  testified  that  FB  had  identified  47 0  Russian 
IRA-controlled  FB  accounts  that  collectively  made  80,000  posts  between  January  2015 
and  August  2017. 

517.  FB  estimated  the  Russian  IRA  reached  as  many  as  1 26  million  persons  through  its 
FB  accounts. 

518.  In  a  hearing  before  the  Senate  Select  Committee  on  Intelligence,  Colin  Stretch, 
FB’s  then  General  Counsel,  estimated  that  roughly  29  million  people  were  served  content 
in  their  FB  “News  Feeds”  directly  from  the  Russian  IRA's  80,000  posts  over  two  years. 

519.  Russian  IRA  posts  from  these  FB  pages  were  also  shared,  liked,  and  followed  by 
people  on  FB,  and,  as  a  result,  three  times  more  people  were  exposed  to  a  story  that 
originated  from  the  Russian  U.S.  election  sabotage  operation. 

520.  FB  has  estimated  that  approximately  126  million  people  were  served  content  from 
a  FB  pages  associated  with  the  Russian  IRA  at  some  point  during  the  2016  presidential 
election  cycle. 

521.  The  FB  general  counsel  also  testified  that  FB  had  identified  170  FB-owned 
Instagram  accounts  that  posted  approximately  120,000  pieces  of  content  during  the  2016 
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presidential  election  cycle  but  did  not  offer  an  estimate  of  the  number  of  persons  reached 
via  FB-owned  Instagram. 

522.  In  20 16,  Russian  IRA  employees  claiming  to  be  U.S.  political  activists  and 
administrators  of  FB  groups,  recruited  U.S.  persons  to  hold  signs  in  front  of  the  White 
House. 

523.  In  June  2014,  four  Russian  IRA  employees  applied  to  the  U.S.  Department  of 
State  to  enter  the  U.S.  and  lied  about  the  purpose  of  their  trip,  claiming  to  be  four 
“Friends”  who  had  met  at  a  party.  Ultimately,  two  Russian  IRA  employees- Anna 
Bogacheva  and  Aleksandra  Krylova-received  visas  and  entered  the  U.S.  on  June  4, 2014. 

524.  Dozens  of  Russian  IRA  employees  were  responsible  for  operating  accounts  on  FB 
and  were  referred  to  within  the  agency  as  "specialists.” 

525.  Russian  IRA’s  operations  focused  their  election  rigging  efforts  on  FB,  YouTube, 
and  Twitter  and  later  added  specialists  who  operated  on  Tumblr  and  Instagram  accounts. 

526.  The  Russian  IRA-controlled  FB  groups  including  "Secured  Borders, "  the  groups 
"Being  Patriotic,"  "Stop  All  Immigrants,"  "Secured  Borders,"  and  "Tea  Party  News"), 
"Black  Matters,"  "Blacktivist, "  "Don't  Shoot  Us,"  "LGBT  United,")  and  "United 
Muslims  of  America." 

5 27.  Throughout  2016,  Russian  IRA  accounts  published  an  increasing  number  of 
materials  supporting  the  Trump  Campaign  and  opposing  the  Clinton  Campaign. 
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528.  For  example,  on  May  31,2016,  the  operational  account  "Matt  Skiber"  began  to 
privately  message  dozens  of  pro-Trump  FB  groups  asking  them  to  help  plan  a  pro-Trump 
rally  near  Trump  Tower. 

529.  To  reach  ever  larger  U.S.  audiences,  the  Russian  IRA  purchased  advertisements 
from  FB  that  promoted  Russian  IRA  FB  groups  on  the  FB  newsfeeds  of  U.S.  FB  users. 

530.  According  to  FB,  the  Russian  IRA  purchased  over  3,500  advertisements,  paying 
approximately  $100,000,  using  U.S.  currency  and  Russian  rubles. 

531.  During  the  2016  U.S.  presidential  campaign,  numerous  Russian  IRA-purchased 
advertisements  explicitly  supporting  or  opposing  a  presidential  candidate  or  promoting 
U.S.  political  rallies  organized,  in  part,  by  the  Russian  IRA. 

532.  Starting  as  early  as  March  2016,  the  Russian  IRA  purchased  advertisements  on 
FB  that  overtly  opposed  the  Clinton  Campaign. 

533.  For  example,  onMarch  18,  2016,  the  Russian  IRA  purchased  an  advertisement 
depicting  candidate  Clinton  in  a  caption  that  read  in  part, "  If  one  day  God  lets  this  liar 
enter  the  White  House  as  a  president  -  that  day  would  be  a  real  national  tragedy." 

534.  Similarly,  on  April  6,  2016,  the  Russian  IRA  purchased  FB  advertisements  for  its 
account  "Black  Matters"  calling  for  a  "flashmob"  of  U.S.  persons  to  "take  a  photo  with 
#HillaryClintonForPrison2016  or  #nohillary2016." 

535.  Russian  IRA-purchased  FB  advertisements  referencing  candidate  Trump 
supported  the  Trump  Campaign  and  disparaged  Secretary  Clinton’s  campaign. 
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536.  The  first  known  Russian  IRA  advertisement  explicitly  endorsing  Trump  was 
purchased  on  April  19,  2016. 

537.  The  Russian  IRA  bought  an  advertisement  for  its  FB-owned  Instagram  account 
"Tea  Party  News"  asking  U.S.  persons  to  help  them  "make  a  patriotic  team  of  young 
Trump  supporters  "  by  uploading  photos  with  the  hashtag  "#KIDS4TRUMP." 

538.  In  subsequent  months,  the  Russian  IRA  purchased  dozens  of  advertisements 
supporting  the  Trump  Campaign,  predominantly  through  the  FB  groups  "Being 
Patriotic,"  "Stop  All  Invaders,"  and  "Secured  Borders." 

539.  Collectively,  the  Russian  IRA's  social  media  accounts  reached  hundreds-of 
millions  of  Americans. 

540.  Individual  Russian  IRA  FB  and  other  platforms  attracted  hundreds  of  thousands 
of  followers. 

541 .  For  example,  at  the  time  they  were  deactivated  by  FB  after  the  completion  of  the 
2016  U.S.  presidential  cycle  in  mid-2017,  the  Russian  IRA's  "United  Muslims  of 
America"  FB  group  had  over  300,000  followers,  the  "Don't  Shoot  Us"  FB  group  had  over 
250,000  followers,  the  "Being  Patriotic"  FB  group  had  over  200,000  followers,  and  the 
"Secured  Borders"  FB  group  had  over  130,000  followers. 

542.  Moreover,  the  Russian  IRA  organized  and  promoted  political  rallies  inside  the 
U.S.  while  posing  as  U.S.  grassroots  activists,  using  FB  groups  and  to  announce  and 
promote  the  event. 
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543 .  The  Russian  IRA  then  sent  a  large  number  of  direct  messages  to  its  FB  followers 
asking  them  to  attend  the  event.  From  those  who  responded  with  interest  in  attending,  the 
Russian  IRA  then  sought  a  U.S.  person  to  serve  as  the  event's  coordinator.  In  most  cases, 
the  Russian  IRA  account  operator  would  tell  the  U.S  .  person  that  they  personally  could 
not  attend  the  event  due  to  some  preexisting  conflict  or  because  they  were  somewhere 
else  in  the  U.S. 

544.  The  Russian  IRA  then  further  promoted  the  event  by  contacting  U.S .  media  about 
the  event  and  directing  them  to  speak  with  the  coordinator. 

545.  After  the  event,  the  Russian  IRA  posted  videos  and  photographs  of  the  event  to 
the  Russian  IRA 's  FB  accounts. 

546.  The  Special  Counsel’s  redacted  report  identified  dozens  of  U.S.  rallies  organized 
by  Russian  IRA. 

547.  The  earliest  evidence  of  a  rally  was  a  "confederate  rally"  in  November  2015. 

548.  The  Russian  IRA  continued  to  organize  rallies  even  after  the  2016  U.S. 
presidential  elections. 

549.  The  Russian  IRA  recruited  U.S.  persons  from  across  the  political  spectrum.  For 
example,  the  Russian  IRA  targeted  a  number  of  black  social  justice  activists. 

550.  The  Russian  IRA  also  recruited  moderators  of  conservative  Internet-based  groups 
to  promote  IRA -generated  content,  as  well  as  recruited  individuals  to  perform  political 
acts,  such  as  walking  around  New  York  City  dressed  up  as  Santa  Claus  with  a  Trump 
mask. 


108 


Complaint 


Case  # 


Case  3:19-cv-04591-SK  Document  1-1  Filed  08/07/19  Page  24  of  83 


551.  As  the  Russian  IRA's  online  audience  became  ever  larger,  they  tracked  U.S. 
persons  with  whom  they  communicated  and  had  successfully  tasked  with  tasks  ran  in 
from  organizing  rallies  to  taking  pictures  with  certain  political  messages. 

552.  With  regard  to  Russian  IRA  interactions  and  contacts  with  the  Trump  Campaign, 
the  Special  Counsel’s  investigation  identified  several  forms  of  connections  between  the 
Russian  IRA  and  members  of  the  Trump  Campaign  and  no  similar  connections  with  the 
Clinton  Campaign. 

553.  For  example,  on  multiple  occasions,  members  and  surrogates  of  the  Trump 
Campaign  promoted,  typically  by  linking,  retweeting  ,  or  similar  methods  of  reposting 
pro-Trump  or  anti-Clinton  content  published  by  the  Russian  IRA  through  Russian  IRA- 
controlled  FB  and  other  platforms. 

554.  Among  the  U.S.  leaders  of  public  opinion  targeted  by  the  Russian  IRA  were 
various  members  and  surrogates  of  the  Trump  Campaign.  In  total.  Trump  Campaign 
affiliates  promoted  dozens  of  tweets,  posts  ,  and  other  political  content  created  by  the 
Russian  IRA. 

555.  In  sum,  the  Special  Counsel’s  investigation  established  that  Russia  interfered  in 
the  2016  presidential  election  through  the  "active  measures"  social  media  campaign 
carried  out  by  the  Russian  IRA,  an  organization  funded  by  Yevgeniy  Viktorovich 
Prigozhin  and  companies  that  he  controlled. 

556.  The  Special  Counsel’s  redacted  report  concluded  that  Prigozhin,  his  companies 
and  Russian  IRA  employees  violated  U.S.  law  through  these  operations,  principally  by 
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undermining  through  deceptive  acts  the  work  of  federal  agencies  charged  with  regulating 
foreign  influence  in  U.S.  elections. 

557.  Moreover,  the  full  extent  of  FB’s  participation  in  the  sabotage  of  the  2016  U.S. 
presidential  elections  is  as  yet  unknowable  as  much  of  the  FB  participation  has  been 
heavily  redacted  in  the  version  of  the  Special  Counsel’s  report  released  for  public 
consumption  and  certain  aspects  of  the  sabotage  exceeded  to  boundaries  set  by  the  DOJ 
for  investigation  by  the  Special  Counsel. 

X.  CAUSES  OF  ACTION 

558.  All  of  the  following  causes  of  action  are  lodged  against  each  of  the  FB 
Defendants. 

COUNT  ONE- VIOLATIONS  OF  THE  COMPUTER  FRAUD  AND  ABUSE  ACT 

559.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 

Complaint  as  though  fully  set  forth  herein. 

560.  At  all  relevant  times,  FB  Defendants,  FB’s  Internet-based  platform,  FB  user’ 
information  and  FB  servers  were  involved  in  interstate  and  foreign  commerce  and 
communication  as  covered  by  18  U.S.C.  §  1030(e)(2)  and  still  are. 

561.  In  direct  violation  of  18  U.S.C.  §  1030,  FB  Defendants,  the  Trump  Campaign, 
Cambridge  Analytica,  Robert  Mercer  and  others  willfully  and  with  fraudulent  intent  used 
Plaintiffs  plundered  FB  user’  information  and  that  of  nearly  a  hundred  million  other  FB 
users  to  successfully  sabotage  the  2016  U.S.  presidential  elections. 
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562.  The  specific  FB  user’  information  of  Plaintiffs  plundered  by  Cambridge  Analytica 
has  not  as  yet  been  disclosed  by  FB  or  Cambridge  Analytica,  but  that  information  could 
have  included,  but  was  not  necessarily  limited  to.  Plaintiff’s  individual  and  company  names 
and  addresses,  hometowns;  birthdates;  gender;  family  connections;  educational 
achievements;  email  addresses;  relationship  statuses;  work  histories;  interests;  hobbies 
;religious  and  political  affiliations;  phone  numbers;  dates  and  times  of  active  sessions  on 
FB;  dates  and  times  and  titles  of  Plaintiff’s  FB  ads;  connections  and  communications  with 
other  FB  users;  attendance  at  events  and  social  gatherings,  stored  credit/debit  card 
information.  Plaintiffs  thousands  of  FB  “Friends”  and  FB  “groups”  Plaintiffs  belonged  to; 
a  list  of  Internet  provider  addresses  Zimmerman  used,  posts  and/or  websites  Zimmerman 
has  liked,  Google  searches  conducted  Zimmerman  and  photographs  and/or  videos. 

563.  This  plundering  of  Plaintiff’s  FB  user  information,  and  that  of  nearly  a  hundred 
million  other  FB  users,  was  accomplished,  in  part,  when  Robert  Mercer  funded  and  then 
directed  Cambridge  Analytica  to  create  individual  FB  user’  voter  profiles  based  on 
demographics,  political  attitudes,  religion,  sexual  orientation  and  the  like  and  then  together 
with  the  Trump  Campaign  and  Russian  operatives  bombarded  prospective  2016  U.S. 
presidential  election  voters  with  pro-candidate  Trump  and  anti-Secretary  Clinton 
disinformation,  misinformation,  propagandists  political  messaging  and  advertising  using 
the  FB  platform  without  a  single  intervention  by  FB,  even  though  FB  were  well  aware  of 
this  unlawful  activity. 
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564.  Instead  of  blocking  the  unlawful  conduct  of  the  Trump  Campaign,  Mercer, 
Cambridge  Analytica  and  Russian  operatives,  FB  and  Cambridge  Analytica  aided  and 
abetted  the  unlawful  conduct  by  assigning  their  personal  to  the  Trump  Campaign  political 
information  processing  offices  that  were  used  to  help  that  campaign  successfully  sabotage 
the  2016  U.S.  presidential  elections  in  violation  of  18  U.S.C.  §  1030(a)(6)(A). 

565.  Plaintiffs  and  many  others  suffered  damage  and  loss  and  continue  to  suffer  damage 
and  loss  as  a  consequence  of  FB  Defendant’s  actions,  including  but  not  limited  to  the  cost 
of  investigating  and  responding  to  the  unauthorized  access  and  abuse  of  their  FB  user 
information  and  that  of  their  “Friends”  and  therefore  seek  compensatory  and  other 
equitable  relief  under  18  U.S.C.  §  1030(g). 

566.  As  a  direct  and  proximate  result  of  the  conduct  of  FB,  Plaintiffs  have  sustained 
significant  harm,  entitling  them  to  damages  in  an  amount  to  be  established  at  trial. 

COUNT  TWO-UNJUST  ENRICHMENT 

567.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

568.  As  alleged  herein,  FB  have  unjustly  received  and  retained  monetary  benefits  from 
Plaintiffs  by  way  of  its  profiting  from  the  use  of  their  FB  user’  information  under  unjust 
circumstances,  such  that  inequity  has  resulted. 

569.  By  engaging  in  the  conduct  described  in  this  Complaint,  FB  knowingly  obtained 
benefits  from  Plaintiffs  as  alleged  herein  under  circumstances  such  that  it  would  be 

inequitable  and  unjust  for  FB  to  retain  them. 
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570.  More  specifically,  by  engaging  in  the  acts  and  failures  to  act  described  in  this 
Complaint,  FB  have  been  knowingly  enriched  by  the  savings  in  costs  that  should  have 
been  reasonably  expended  to  protect  the  privacy  of  Plaintiff ’s  FB  user’  information  and 
by  a  substantial  increase  in  the  share  price  of  FB.  See  Restatement  (Third)  of  Restitution 
and  Unjust  Enrichment  §  39(1)  (2011). 

571 .  Moreover,  FB  have  been  enriched  unjustly  by  the  use  of  Plaintiff  s  information 
for  its  advertising  business,  and  has  profited  greatly  as  a  result,  even  though  it  did  not 
protect  this  information  as  it  had  promised. 

572.  By  engaging  in  the  conduct  described  in  this  Complaint,  FB  have  knowingly 
obtained  benefits  from  or  by  way  of  Plaintiffs,  including  by  way  of  the  use  of  their 
information  in  the  course  of  its  business,  especially  its  lucrative  advertising  business, 
under  circumstances  such  that  it  would  be  inequitable  and  unjust  for  it  to  retain  them. 

573 .  Thus,  FB  will  be  unjustly  enriched  if  they  are  permitted  to  retain  the  benefits 
derived  from  the  unauthorized  and  impermissible  gathering  and  sharing  of  Plaintiffs  FB 
user’  information  by  FB  authorized  and  unauthorized  third  parties. 

As  a  direct  and  proximate  result  of  the  conduct  of  FB  Defendants  Plaintiffs  have 
sustained  significant  harm,  entitling  them  to  damages  in  an  amount  to  be  established  at 
trial. 


COUNT  THREE-VIOLATIONS  OF  CONSTITUTIONAL  RIGHTS 

574.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  frilly  set  forth  herein. 
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575.  This  case  is  likely  one  of  the  first  filed  in  this  Court  that  addresses  the  relationship 
between  the  First  Amendment  and  the  Internet-based  FB  communications  platform. 

576.  A  fundamental  principle  of  the  First  Amendment  is  that  all  persons  have 
unfettered  access  to  places  where  they  can  speak  and  listen,  and  then,  after  reflection, 
speak  and  listen  once  more.  A  basic  rule  is  that  a  street  or  a  park  is  a  quintessential  forum 
for  the  exercise  of  First  Amendment  rights.  See  Ward  v.  Rock  Against  Racism,  491  U.  S. 
781,796  (1989). 

577.  FB  brags  that  it  offers  its  users  a  free  facility  for  communication  of  all  kinds.  See 
Reno  v.  American  Civil  Liberties  Union,  521  U.  S.  844,  868  (1997). 

578.  FB  users  can  debate  religion  and  politics  with  their  friends  and  neighbors  or  share 
vacation  photos.  All  fifty  states,  thousands  of  cities  and  towns,  and  almost  every  elected 
official  have  FB  accounts. 

579.  The  First  Amendment  of  the  U.S.  Constitution  and  42  U.S.C.  §  1983  protects 
Zimmerman’s  freedom  of  speech  and  association  and  provide  protection  against  political 
viewpoint  discrimination  in  the  unfettered  access  to  and  use  of  public  spaces,  quasi¬ 
public  spaces,  and  limited  public  spaces,  which  includes  the  use  of  the  FB  platform. 

580.  The  Fourth  Amendment  of  the  U.S.  Constitution  and  42  U.S.C.  §  1983  protect 
Zimmerman’s  right  to  privacy.  See  Puckingham  v.  North  Carolina 

581.  42  U.S.C.  §  1983  is  enforceable  against  FB  Defendants  because  FB  provides  to  its 
users  a  public  free  speech  forum  of  unequaled  proportions  and  audience  reach  that  make 
state  fairs  and  parks  seem  negligible. 
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582.  FB  is  also  a  quasi-state  actor  because  it  wields  potent  monopolistic  and  political 
powers  and  is  currently  getting  ready  to  launch  its  own  international  currency. 

583.  The  state  constitutions  ofNorth  Carolina  and  California  also  provide 
constitutional  free  speech  and  privacy  protections  equal  to  those  provided  by  the  U.S. 
Constitution. 

584.  FB  Defendants  are  quasi-state  actors  because  they  regulate  and  control  the  FB 
platform  that  served  Plaintiffs  and  at  least  a  billion  other  FB  users’  as  a  public  and  private 
communications  platform. 

585.  FB  Defendants  acted  deceptively,  willfully,  recklessly  and  unlawfully, 
individually  and  in  concert,  directly  and  indirectly,  and  motivated  by  their  greed  and 
political  ideologies,  maliciously  violated  Zimmerman’s  constitutionally  protected  rights 
of  free  speech,  free  association  and  privacy  as  well  as  his  right  to  participate  in  free  and 
fair  elections. 

586.  FB  Defendants  discriminated  against  Zimmerman  by  blocking  his  unfettered 
access  to  his  FB  accounts  for  no  expressed  substantive  reason,  thus  unlawfully  censoring 
Plaintiffs  political  messaging,  disallowing  Zimmerman’s  communications  with  his 
thousands  of  FB  “Friends,”  thus  denying  Zimmerman  his  right  to  express  and  promote 
his  political  and  non-political  ideas  and  to  otherwise  advertise  and  market  his  political 
and  non-political  books  and  to  his  FB  “Friends”  and  others. 

587.  FB  has  never  expressed  a  compelling  reason  for  its  blocking  of  Zimmerman’s  use 
of  his  FB  accounts  that,  before  being  blocked  by  FB,  he  used  to  communicate  with  his 
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thousands  of  FB  “Friends”  and  to  advertise  his  political  viewpoints  and  political  and 
non-political  books  and  receive  messages  from  his  FB  “Friends." 

588.  FB  conducted  these  unconstitutional  activities  after  repeatedly  bragging  publicly 
and  privately,  that  its  foundational  mission  is  to  enable  the  citizens  of  this  planet  to  freely 
communicate  with  one  another. 

589.  Treasonous  and  unconstitutional  conduct  against  the  U.S.  and  its  citizens  shall 
consist  not  only  in  levying  conventional  war  against  them,  or  in  adhering  to  their 
enemies,  but  also  in  providing  them  aid  and  comfort  as  FB  did  when  they  facilitated  the 
Russian  cyberattack  on  the  2016  U.S.  presidential  elections. 

590.  Chapter  18  of  the  U.S.C.  sets  out  the  punishment  for  treasonous  conduct: 
“Whoever,  owing  allegiance  to  the  United  States,  levies  war  against  them  or  adheres  to 
their  enemies,  giving  them  aid  and  comfort  within  the  United  States  or  elsewhere,  is 
guilty  of  treason  and  shall  suffer  death,  or  shall  be  imprisoned  not  less  than  five  years  and 
fined  under  this  title  but  not  less  than  $  10,000;  and  shall  be  incapable  of  holding  any 
public  office  in  the  United  States.  ” 

591.  Although  the  U.S.  Constitution  defines  treasonous  conduct  narrowly,  in  United 
States  v.  Burr,  159  U.S.  78  (1895),  U.S.  Supreme  Court  Chief  Justice  John  Marshall  in 
delivering  the  Court’s  opinion  regarded  war  as  not  an  abstract  term,  and  defined 
treasonous  as  an  assemblage  of  people  who  intend  to  use  actual  force  against  the 
government,  and/or  adhering  to  enemies  of  the  U.S.  and/or  by  giving  enemies  of  the  U.S. 
aid  and  comfort. 
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592.  Later,  in  Cramer  v.  United  States,,  225  U.S.  1  (1945)  the  U.S.  Supreme  Court 
made  clear  that  the  provision  of  "aid  and  comfort"  has  to  consist  of  an  affirmative  act 
during  war,  such  as  the  Russian  launched  cyberattack  on  the  2016  U.S.  presidential 
election  cycle  as  knowingly  facilitated  by  FB  and  as  described  throughout  this 
Complaint,  which  is  the  modem  equivalent  of  conventional  warfare. 

593 .  Since  at  least  2014,  Russian  intelligence  agents  and  operatives  in  concert  with  FB 
the  Trump  Campaign,  Cambridge  Analytica,  Robert  Mercer  and  others  have  been 
conducting  malicious  cyberwarfare  against  the  U.S.,  and  its  citizens  and  still  are. 

594.  That  cyberwarfare  shares  the  same  ultimate  objective  as  conventional  warfare, 
namely,  among  other  things,  the  destruction  of  our  democracy  and  the  rule  of  law. 

595.  As  cyberwarfare  is  the  functional  equivalent  of  conventional  warfare,  the  willful 
and  reckless  actions  and  inactions  of  FB  Defendants  in  facilitating  the  cyberattacks  on  the 
2016  U.S.  presidential  election  cycle  qualify  as  substantive,  identifiable,  treasonous 
actions  because  those  actions  “adhered  to  the  enemy”  by  rendering  Russia  “aid  and 
comfort,”  by  willfully  and  for  profit  facilitating  Russia’s  malicious  cyberwarfare  against 
the  U.S.  and  the  U.S.  public,  including  Zimmerman. 

596.  Also,  by  failing  to  protect  Zimmerman  against  and  report  the  numerous  willful 
invasions  of  Plaintiff  s  FB  user’  information,  FB  Defendants  have  violated  Plaintiffs 
Fourth  Amendment  right  to  privacy. 

597.  The  constitntions  of  California  and  North  Carolina  are  also  on  point. 

598.  For  example,  California’s  Constitution  at  Article  1  Declaration  of  Rights:  Section 
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1  establishes  a  citizen’s  privacy  rights  declaring:  “All  people  are  by  nature  free  and 
independent  and  have  inalienable  rights.  Among  these  are  enjoying  and  defending  life 
and  liberty,  acquiring,  possessing,  and  protecting  property,  and  pursuing  and  obtaining 
safety,  happiness,  and  privacy.”  Section  28,  deals  with  victim’s  rights. 

599.  North  Carolina’s  Constitution  Article  1,  Section  10  establishes  the  right  to  free 
elections. 

600.  At  a  minimum,  unconstitutional,  other  unlawful  and  possibly  treasonous  conduct 
of  FB  caused  Zimmerman  to  suffer  losses  of  his  reasonable  expectation  to  exercise  his 
constitutional  and  other  rights  and  privileges  using  the  FB  platform. 

601 .  Zuckerberg  has  admitted  he  and  others  at  FB  were  aware  of  the  spread  of  Russian 
propaganda  on  the  FB  platform  and  did  nothing  to  prevent  it,  instead  pocketing  Russian 
rubles  and  other  currency  from  to  sale  of  advertising  space  to  Russian  operatives. 

602.  Zimmerman  had  a  reasonable  expectation  to  use  his  FB  accounts,  which  prior  to 
having  his  accounts  blocked  by  FB,  to  communicate  with  thousands  of  his  FB  “Friends” 
and  to  promote  and  advertise  his  political  viewpoints  and  political  and  non-political 
books  and  receive  messages  and  book  orders  from  his  FB  “Friends.” 

603.  FB  Defendants  willfully  and  recklessly  enabled  the  unfettered  access  to 
Plaintiff’s  FB  user  information  and  that  of  their  FB  “Friends”  without  any  authorization 
from  Plaintiff  by  numerous  third  parties  using  various  computer  applications  and 
telephonic  devices. 

604.  A  massive  public  outcry  followed  the  revelation  of  FB’s  unconstitutional  and 
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other  tortious  practices  that  eventually  led  to  multiple  ongoing  foreign  and  domestic 
investigations  of  FB  by  governmental  regulators  and  legislators  and  numerous  private 
lawsuits 

605.  Further,  the  extent  of  the  authorized  and  unauthorized  FB  user’  information 
plundered  by  third  parties  from  Plaintiffs  will  never  be  fully  known  and  can  continue  far 
into  the  future. 

606.  Plaintiffs  were  substantially  harmed  and  will  continue  to  be  harmed  by  the  FB 
facilitated  intrusion  into  Zimmerman’s  private  affairs  as  detailed  throughout  this 
Complaint  and  FB  Defendants  active  participation  in  the  successful  sabotage  of  the  2016 
U.S.  presidential  elections  that  enabled  the  illegitimate  and  unlawful  election  of  Trump. 

607.  Based  on  FB’s  intentionally  deceptive,  willful,  reckless  and  unlawful  actions  and 
inactions  as  set  out  throughout  this  Complaint,  Plaintiffs  seek  injunctive  relief  in  the  form 
of:  (1)  A  FB-funded  investigation  to  identify  every  third  party  that  has  had  unfettered 
access  to  Plaintiffs  FB  user  information,  and  how  those  third  parties  gained  that  access 
and  how  they  used  Plaintiffs  FB  user  information  and  the  destruction  of  it; 

(2)  certification  by  FB  that  no  third  parties  are  currently  able  to  access  Plaintiffs  FB  user 
information  from  FB’s  information  files  and  those  of  third  parties  that  obtained  it  from 
FB;  and  (3)  destruction  by  FB  of  all  of  Plaintiff  s  FB  user  information  now  in  FB  and 
third  party  information  files. 

608.  The  cyber-sabotage  of  elections  by  saboteurs  deploying  various  cyberweapons  is 
a  relatively  new  phenomena  and  primarily  engaged  in  by  well-heeled  organizations  and 
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persons  like,  as  here,  the  Trump  Campaign,  FB,  Russian  intelligence  agents  and 
operatives  and  right-wing  billionaires  like  Robert  Mercer  seeking  to  enrich  themselves, 
grow  their  political  power,  undermine  free  elections,  democratic  institutions  and  values 
and  the  rule  of  law. 

609.  In  late  May  2019,  Monica  Bickert,  FB’s  V.P.  Product  Policy,  publicly  defended 
FB  having  allowed  a  doctored  derogatory  video  of  House  Speaker  Nancy  Pelosi,  to  run 
on  the  FB  platform,  stating  “FB  will  continue  to  host  a  video  of  Nancy  Pelosi  that  has 
been  edited  to  give  the  impression  that  the  Democratic  House  speaker  is  drunk  or 
unwell.” 

610.  The  Pelosi  defamation  facilitated  by  FB  is  but  the  latest  incident  highlighting 
FB’s  willful  failures  to  deal  with  disinformation,  misinformation,  lies  and  hate  speech. 

611.  Rudy  Giuliani,  the  President’ s  personal  lawyer,  was  among  the  President’ s 
supporters  who  promoted  the  derogatory  Pelosi  video  He  tweeted  a  link  to  a  copy  of  the 
video  on  FB  stating:  “What  is  wrong  with  Nancy  Pelosi?  Her  speech  pattern  is  bizarre.” 

612.  One  version  of  the  doctored  Pelosi  video,  which  FB  has  allowed  to  continue 
running  on  a  FB  page  is  entitled  “Politics  WatchDog”  and  has  been  viewed  millions  of 
times,  attracting  comments  speculating  on  Pelosi’ s  health,  supposed  use  of  drugs,  and 
other  apparent  ailments. 

613.  Despite  the  apparently  malicious  intent  of  the  video’s  creator,  FB  has  said  it  will 
only  downgrade  its  visibility  in  users’  newsfeeds  and  attach  a  link  to  a  third  party 
factchecking  site  pointing  out  that  the  clip  is  misleading. 
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614.  As  a  result,  although  it  is  less  likely  to  be  seen  by  accident,  the  doctored  video 
will  continue  to  be  seen. 

615.  FB  was  forced  into  taking  this  excruciating  minimalist  remedial  action  after  the 
Washington  Post  reported  the  story. 

616.  The  President  tweeted  a  different  altered  video  of  Pelosi,  whichaired  on  a  Fox 
News  business  broadcast,  and  had  been  heavily  edited  to  make  it  appear  as  if  she  was 
stuttering  and  slurring  her  language.  The  President’s  tweet  said:  “PELOSI  STAMMERS 
THROUGH  NEWS  CONFERENCE”. 

617.  Alarming  concerns  have  been  raised  about  the  enormous  impact  of  the  future  use 
of  disturbingly  realistic  fake  or  doctored  videos  by  election  riggers  and  other  miscreants. 

618.  In  addition  to  suffering  the  tortious  and  possibly  treasonous  conduct  of  FB 
Defendants,  Zimmerman  had  a  reasonable  expectation  of  privacy  when  using  FB  to 
engage  in  online  activity;  and  (2)  a  reasonable  expectation  that  FB  would  not  participate 
with  Russian  operatives  the  Trump  Campaign,  Robert  Mercer  and  others  in  conduct  that 
eventually  led  to  the  successful  sabotage  of  the  2016  U.S.  presidential  elections. 

619.  Third  parties  tracked  and  extracted  Plaintiff’s  FB  user’  information  from  FB’s 
information  repository,  tracking  and  extracting  that  Plaintiffs  did  not  authorize  and  by 
doing  so  willfully  intruded  into  Zimmerman’s  solitude,  seclusion  and  private  affairs. 

620.  FB  willfully  designed  its  platform  and  established  policies  and  procedures 
governing  its  use  in  such  a  way  so  as  to  readily  enable  the  plundering,  without  any 
authorization  by  Plaintiffs  of  Plaintiff’s  FB  user’  information  and  that  of  their  FB 
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“Friends”  by  third  parties. 

621 .  Numerous  privacy  intrusions  by  third  parties  were  and  are  highly  offensive  to 
Plaintiffs  and  would  be  to  any  reasonable  person  or  business.  This  is  evidenced  by  the 
immense  public  outcry  following  the  revelation  of  FB’s  failure  to  protect  the  privacy  of  ts 
users’  FB-stored  information. 

622.  Further,  the  extent  of  the  intrusions  on  Zimmerman’s  right  to  privacy  and  the 
extent  to  which  that  plundered  information  was  used  and  for  what  purposes  will  never  be 
fully  known  because  privacy  intrusions  and  information  plunders  involve  obtaining  and 
sharing  Plaintiffs  FB  user’  information  and  that  of  their  FB  user’  with  potentially  known 
unknown  third  parties  for  unknown  purposes  in  perpetuity. 

623 .  During  the  2016  U.S.  presidential  elections  a  majority  of  Americans  received 
more  fake  news  and  fake  stories  than  factual  news  and  stories  broadcast  over  FB,  FB- 
owned  Instagram  and  FB-owned  WhatsApp. 

624.  Of  the  twenty  most  shared  fake  news  and  stories  broadcast  over  FB-owned 
platforms  during  the  final  phase  of  the  2016  U.S.  presidential  elections  seventeen  were 
either  pro-Trump  or  anti-Clinton.  See  How  to  Rig  and  Election,  chapter  4,  by  Nic 
Cheeseman  and  Brian  Klaas. 

625.  As  a  direct  and  proximate  result  of  the  conduct  of  FB,  Plaintiffs  have  sustained 
significant  harm,  entitling  them  to  nominal  and  punitive  damages  in  an  amount  to  be 
established  at  trial. 

626.  Inasmuch  as  FB  have  amassed  massive  amounts  of  wealth,  only  a  massive  award 
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of  punitive  damages  is  likely  to  deter  FB  from  engaging  in  future  election  sabotage  and 
related  unconstitutional  and  tortious  conduct. 

COUNT  FOUR-  BREACH  OF  THE  IMPLIED  COVENENT  OF  GOOD  FAITH  AND 

FAIR  DEALING 

627.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

628.  Every  contract  imposes  upon  each  party  a  duty  of  good  faith  and  fair  dealing  in  its 
performance  and  its  enforcement.”  See  Restatement  (Second)  of  Contracts  §  205  (1981). 

629.  Plaintiffs  were  required  by  FB-constructed  contracts  to  provide  their  personal  and 
business  information  in  order  to  register  to  use  the  FB  platform  and  always  used  it 
responsibly. 

630.  Implicit  and  explicit  in  the  contractual  agreements  between  FB  and  Plaintiffs  was 
FB’s  obligation  to  protect  the  privacy  of  the  Plaintiffs  FB  user’  information. 

63 1 .  Even  if  not  explicitly  stated,  which  it  was,  FB’s  information  privacy  protection 
duty  is  read  into  contracts  and  functions  as  a  supplement  to  the  express  contractual 
covenants  in  order  to  prevent  a  transgressing  party  from  engaging  in  conduct  which 
(while  not  technically  transgressing  the  express  covenants)  frustrates  the  other  party’s 
rights  to  the  benefit  of  the  contract. 

632.  Thus,  any  claim  on  the  part  of  FB  that  technically  it  was  permitted  to  allow  the 
collection  and  transmittal  of  Plaintiff  s  FB  user’  information  must  be  read  in  the  context 
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of,  and  give  way  to,  those  user’s  rights  to  the  benefit  of  the  contract,  including  the  terms 
strictly  delimiting  such  activity. 

633.  The  duty  to  perform  contractual  obligations  in  good  faith  applies  to  FB’s 
agreements  governing  information  collection,  use,  and  protection,  including  its  “Terms  of 
Service,”  “Information  Use  Policy”  and  “Statement  of  Rights  and  Responsibilities.” 

634.  In  order  not  to  frustrate  the  reasonable  expectations  of  Plaintiffs  under  these 
sections  and  others  in  the  FB-constructed  contract  and  generally,  FB  was  bound  not  to 
allow  the  access,  collection,  and  transfer  of  Plaintiffs  FB  user’  information  to  any  third 
party. 

63  5 .  But  b  y  failing  to  act  reasonably  i  n  securing  the  privacy  of  Plaintiff  s  FB  user’ 

information,  FB  breached  the  covenant  of  good  faith  and  fair  dealing. 

636.  As  a  result  of  the  aforesaid  breach  of  the  implied  covenant  of  good  faith  and  fair 
dealing.  Plaintiffs  have  been  harmed  and  have  suffered  damages  by  way  of  the 
widespread  past  and  future  dissemination  of  their  FB  user’  information  and  that  of  their 
FB  “Friends.” 

637.  At  a  minimum,  even  if  Plaintiffs  had  not  suffered  equitable  or  other  damages 
nominal  damages  recoverable  under  Cal.  Civ.  Code  §  3360.77. 

COUNT  FIVE-INVASION  OF  PRIVACY-PUBLIC  DISCLOSURE  OF 
PRIVATE  FACTS 

63  8.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 

Complaint  as  though  fully  set  forth  herein. 
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639.  Plaintiffs  assert  this  Claim  under  California  law 

640.  FB  is  a  “person”  within  the  meaning  of  the  California  Consumer  Legal  Remedies 

(“CLRA”)  in  that  it  is  a  corporation. 

641.  Plaintiffs  are  “consumers”  within  the  meaning  of  CLRA  in  that  they  are 
individuals  who  seek  or  acquire  services  for  personal,  family,  or  business  purposes. 

642.  CLRA  §  1770(a)(5)  prohibits  “...representing  that  goods  or  services  have 
sponsorship,  approval,  characteristics,  ingredients,  uses,  benefits,  or  quantities  which  they  do  not 
have  or  that  a  person  has  a  sponsorship,  approval,  status,  affiliation,  or  connection  which  he  or 
she  does  not  have.” 

643.  CLRA  §  1770(a)(14)  prohibits  “...representing  that  a  transaction  confers  or 
involves  rights,  remedies,  or  obligations  that  it  does  not  have  or  involve,  or  that  are  prohibited  by 
law.” 

644.  .  FB’s  conduct  as  alleged  herein  violates  CLRA’s  ban  of 

proscribed  practices  at  Cal.  Civ.  Code  (“CCC”)  §  1770(a)  subdivisions  (5)  and  ( 14)  in  that, 
among  other  things,  FB  misrepresented  its  services  by  failing  to  disclose  that  it  would  and  did 
allow  access  to  its  users’  information  to  its  business  partners,  mobile  carriers,  software  makers, 
security  firms,  banks,  chip  designers,  device  makers,  retailers,  wholesalers  and  numerous  other 
third  parties  without  FB  user  consent. 

645.  The  FB  user  information  privacy  protection  promises  were  false  promises  and 

entirely  illusory. 

646.  With  respect  to  “whitelisted”  applications,  FB  collected  revenue  for  the  continued 
unfettered  access  to  Plaintiffs’  information  and  did  not  disclose  that  it  was  doing  so,  nor  did  FB 
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offer  to  pay  Plaintiffs  for  the  use  of  their  information  by  “whitelisted”  applications,  or  any  other 
third  party  or  FB  itself. 

647.  Plaintiffs  have  suffered  injuries  caused  by  FB’s  misrepresentations  and 
omissions  because  Plaintiffs  suffered  an  invasion  of  their  privacy  as  a  result  of  FB 
exposing  their  information  to  its  numerous  third  parties  and  were  deprived  of  the  income  FB 
generated  through  its  unauthorized  use  and  sale  of  their  information. 

648.  Plaintiffs  seek  equitable  relief  for  FB’s  violations  of  CLRA,  including 
injunctive  relief  to  enjoin  the  wrongful  practices  alleged  herein,  and  to  take  corrective  action  to 
remedy  past  conduct,  including  ending  all  information-sharing  partnerships  still  in  effect  and 
having  FB  direct  all  device  makers,  business  partners,  and  “whitelisted”  applications  with 
Plaintiffs’  information  stored  in  their  information  repositories  to  delete  that  information. 

649.  Sandberg,  like  Zuckerberg,  has  admitted  FB’s  numerous  failures  to  protect  the 
privacy  ofFB  users’  information  as  well  as  Russia’s  use  of  the  FB  platform  to  sabotage 
the  US  2016  presidential  election  cycle. 

650.  Sandberg  said:  “There  are  things  that  we  missed.  W e  wish  we  had  understood  the 
Russian  interference  in  the  US  election.  We  didn’t.  We  missed  it.” 

65 1 .  Sandberg  avoided  answering  more  pressing  questions  over  the  distribution  of  FB 
users’  private  information. 

652.  Recently,  an  investigative  reporters  revealed  that  FB  had  ignored  the  privacy 
concerns  of  its  users  in  a  series  of  2012  emails  despite  signing  a  “Consent  Decree”  with 
the  FTC  that  mandated  that  FB  fix  their  numerous  failures  to  protect  the  privacy  of  their 
users’  information. 
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653 .  When  asked  by  Caroline  Hyde,  a  business  news  anchor  on  Bloomberg  TV,  to 
address  its  users  privacy  concerns  of  its  users,  Sandberg  said:  “I  think  there  has  been  a 
growing  understanding  of  how  important  privacy  is  and  how  we  have  to  protect  it.  ”  I 
think  if  you  look  at  some  of  the  early  iterations  of  the  FB  platform,  we  were  allowing 
people  to  share  too  much  information  early  on  before  2014.  If  I  used  an  app,  I  would 
share  my  information  and  my  friend’s  information.  It’s  really  hard  to  remember  —  this  is 
not  an  excuse  because  I  think  we  should  have  done  better,  the  real  concern  then,  was  we 
were  hoarding  information  and  not  sharing  it.  People  were  very  concerned  that  we  were  a 
walled  garden.” 

654.  Sandberg  explained  that  through  trial  and  error  FB  realized  it  needed  to  share  the 
“minimum  amount  of  information.” 

655.  Sandberg  compared  FB  to  any  new  technology,  from  the  printing  press  to  radio  or 
TV  stating  that:  “There  is  some  commonality  to  this  experience.  A  new  technology 
comes  out.  People  celebrate  it  to  see  all  the  good  it  does,  almost  to  the  exclusion  of  any 
bad,  then  something  bad  happens,  and  people  see  that  the  bad  can  happen  and  they  focus 
on  that.  That’s  where  the  new  rules  are  written,”  she  said.  “New  rules  need  to  be  written 
for  the  Internet  and  we  want  to  be  part  of  that.” 

656.  Later,  Sandberg  deflected  a  question  on  the  call  of  FB  co-founder  Chris  Hughes 
for  the  breaking  up  of  FB  stating:  “When  you  think  about  what’s  underlying  this 
conversation  is  that  people  are  worried  about  the  size  and  power  of  US  tech  companies 
whether  it’s  ours  or  others.  We  understand  that ...  we  have  a  big  impact  in  the  world. ,” 

127 


Complaint 


Case  # 


Case  3:19-cv-04591-SK  Document  1-1  Filed  08/07/19  Page  43  of  83 


she  said  before  turning  to  what  she  called  a  bigger  threat.  “People  aren’t  appropriately 
worried  about  Chinese  companies,  some  of  which  are  far  bigger  and  have  far  many  more 
people  and  services  than  we  do,  and  I  think  that’s  something  that  needs  to  be  taken  into 
account.” 

657.  Hyde  wrapped  up  the  interview  asking  Sandberg  if  she  ever  questioned  her  role  as 
a  leader  given  the  onslaught  of  company  disasters. 

658.  “Of  course.  I  don’t  know  any  good  leaders  that  didn’t,”  Sandberg  said.  “When  we 
missed  what  happened  with  the  Russian  election,  when  we  failed  to  respond  quickly 
enough  to  Cambridge  Analytica,  of  course.” 

COUNT  SEX-CIVIL  CONVERSION 

659 .  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

660.  Civil  conversion  is  the  wrongful  exercise  of  dominion  over  the  property  of 
another.  Here,  FB  Defendants  exercised  dominion  over  Plaintiff’s  FB  user’  information. 

661.  The  elements  of  a  claim  for  civil  conversion  are:  (1)  the  plaintiffs  ownership  or 
right  to  possession  of  the  property  unlawfully  converted  by  defendants;  (2)  the 
defendant’s  conversion  by  a  wrongful  act  or  disposition  of  property  rights;  and  (3) 
damages.”  See  Lee  v.  Hanley  (2015)  Cal.4th  1225,  1240  [191  Cal.Rptr.3d  536,  354  P.3d 
334], 

662.  Here,  the  Plaintiff  s  right  of  ownership  is  undisputable.  Here,  FB  Defendants  have 
repeatedly  admitted  their  wrongful  and  willful  and  reckless  exercise  of  dominion  over 
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Plaintiffs  property,  namely  their  FB  user  information,  and  disposed  of  it  in  numerous 
and  various  ways,  and  Plaintiffs  are  seeking  appropriate  damages. 

663 .  It  is  not  necessary  that  there  be  a  manual  taking  of  the  property;  it  is  only 
necessary  to  show  an  assumption  of  control  or  ownership  over  the  property,  or 
that  the  alleged  converter  has  applied  the  property  to  his  own  use.  See 

Shopoff  &  Cavallo  LLP  v.  Hyon  (2008)  167  Cal.App.4th  1489,  1507  [85  Cal.Rptr.3d 
268], 

664.  Any  act  of  dominion  wrongfully  exerted  over  the  personal  property  of  another 
inconsistent  with  the  owner’s  rights  thereto  constitutes  conversion.  See 

Plummer  v.  Day/Eisenberg,  LLP  (2010)  184  Cal.App.4th  38,  50  [108 
Cal.Rptr.3d  455], 

665.  Conversion  is  a  strict  liability  tort.  The  foundation  of  the  action  rests  neither  in 
the  knowledge  nor  the  intent  of  the  defendant.  Instead,  the  tort  consists  in  the 
breach  of  an  absolute  duty;  the  act  of  conversion  itself  is  tortious. 

666.  Therefore,  questions  of  the  defendant’ s  good  faith,  lack  of  knowledge,  and  motive 
are  immaterial.”  See  Los  Angeles  Federal  Credit  Union  v.  Madatyan  (2012),  209 
Cal.App.4th  1383,  1387  [147  Cal.Rptr.3d  768]. 

667.  “The  rule  of  strict  liability  applies  equally  to  purchasers  of  converted  goods,  or 
more  generally  to  purchasers  from  sellers  who  lack  the  power  to  transfer 
ownership  of  the  goods  sold.  That  is,  there  is  no  general  exception  for  bona  fide 
purchasers.”  See  Regent  Alliance  Ltd.,  23 1  Cal.App.4th  at  p.  1181. 
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668.  As  the  result  ofFB  Defendants  willful  and  reckless  unlawful  conversion 
activities,  FB  Defendants  have  willfully  and  recklessly  interfered  with  Plaintiffs  right  of 
possession  and  control  of  their  FB  user’  information. 

669.  As  a  direct  and  proximate  result  of  FB ’s  willfully  unlawful  conduct,  Plaintiffs 
suffered  injury,  damage,  loss  and  other  harms  and  therefore  seek  compensatory  damages 
in  an  amount  to  be  established  at  trial. 

670.  As  a  direct  and  proximate  result  of  the  conduct  of  FB  in  converting  Plaintiffs  FB 
user’  information,  FB  Defendants  have  acted  with  malice,  oppression  and  in  conscious 
disregard  of  the  Plaintiff  s  privacy  rights  and  Plaintiffs,  therefore,  seek  an  award  of 
punitive  damages  in  an  amount  to  be  established  at  trial. 

COUNT  SEVEN-NEGLIGENCE  AND  GROSS  NEGLIGENCE 

67 1 .  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

672.  FBs  owed  a  duty  to  Plaintiffs  to  exercise  reasonable  care  in  the  obtaining, 
using,  and  protecting  of  their  FB  user’  information,  arising  from  the  sensitivity  of  their 
information  and  the  expectation  that  their  information  was  not  going  to  be  shared  with  third 
parties  without  their  consent. 

673.  This  duty  included  FB  ensuring  that  no  application  developers,  device 
makers  or  other  third  parties  were  collecting,  storing,  obtaining  and/or  selling 
Plaintiffs’  FB  user’  information. 

674.  Plaintiffs’  willingness  to  entrust  FB  with  their  information  was  predicated  on  the 
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understanding  that  FB  would  take  appropriate  measures  to  protect  it. 

675.  FB  had  a  special  relationship  with  Plaintiffs  as  a  result  of  being  entrusted  with 
their  information,  which  provided  an  independent  special  duty  of  care. 

676.  FB  knew  that  the  information  of  Plaintiffs  had  value  because  there  is  an  active 
market  for  FB  user’  information.  Indeed,  FB  has  received  tens  of  billions  of  dollars  from  selling 
targeted  advertising  on  its  platform. 

677.  There  is  also  an  active  black  market  for  FB  user’  information. 

678.  FB  received  multiple  warnings  that  its  user’  information  was  at  risk. 

679.  In  2012,  Sandy  Parakilas,  former  FB  operations  manager  warned  FB’s  executives 
about  the  risks  of  application  developers  gaining  unfettered  access  to  FB  information  without 
their  consent. 

680.  According  to  Parakilas,  FB  was  not  conducting  regular  audits  of  application 
developers  use  of  the  FB’s  platform. 

681 .  FB  ignored  Parakilas’ s  warning. 

682.  In  2012,  FB  executed  a  “Consent  Decree”  with  the  FTC  agreeing  to,  among  other 
things,  clearly  and  prominently  disclose  its  sharing  of  FB  user’  information  with  third  parties. 

683.  Even  so,  FB  continued  to  let  application  developers  access  its  users’  information 
without  their  consent. 

684.  And,  as  late  as  2017,  Alex  Stamos,  FB’s  then  Chief  of  Security,  warned 
FB  executives  about  security  risks  on  the  platform  in  a  written  report  concerning  the 
circumstances  leading  to  Cambridge  Analytica  obtaining  FB  users’ 
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personal  information. 

685.  Despite  these  and  other  numerous  warnings,  FB  failed  to  take  reasonable  steps  to 

prevent  harm  to  Plaintiffs  and  its  other  users. 

686.  On  April  30,  2014,  FB  announced  a  new  “anonymous  login”  feature  that 
would  have  allowed  users  to  use  an  application  without  sharing  any  personal 
information.  Yet,  FB  never  implemented  this  feature. 

687.  On  April  30,  2104,  FB  also  announced  a  new  “controlled  login”  feature  to 
allow  users  to  choose  what  information  they  shared  with  application  developers  before 
login  in,  but  FB  did  not  implement  this  feature  until  May  2015. 

688.  As  early  as  December  1 1 ,  201 5,  FB  received  notice  that  application  developer 
Aleksandr  Kogan  had  sold  FB  user’  personal  information  to  Cambridge  Analytica;  but  FB 
waited  until  April  2018,  more  than  three  years  later,  to  notify  users  that  their  personal 
information  had  been  unlawfully  misappropriated. 

689.  FB  owed  a  duty  to  timely  disclose  to  Plaintiffs  that  FB  had  allowed 

their  information  to  be  accessed  by  Cambridge  Analytica  and  numerous  other  third  parties. 

690.  Plaintiffs  had  a  reasonable  expectation  that  FB  would  information  them  of  the 
improper  disclosure  of  their  information. 

691.  FB  breached  its  duties  by,  among  other  things:  (a)  failing  to  ensure  that 
application  developers,  “whitelisted”  applications,  device  makers  and  other  third  parties  were  not 
improperly  collecting,  storing,  obtaining  and/or  selling  Plaintiffs’  information  without  their 
informed  consent;  and  (b)  failing  to  provide  adequate  and  timely  notice  that  Plaintiffs  FB- 
stored  content  and  information  had  been  improperly  obtained  by  Cambridge  Analytica  and 
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numerous  third  parties. 

692.  But  for  FB’ s  breach  of  its  duties,  including  its  duty  to  use  reasonable  care 
to  protect  and  secure  Plaintiffs  information,  Plaintiffs  information  would  not  have  been 
disclosed  without  their  consent  to  third  parties,  which  resulted  in  further  misuse  of  Plaintiff  s 
information. 

693.  Plaintiffs  were  foreseeable  victims  of  FB’s  breach  of  its  duties. 

694.  FB  knew  or  should  have  known  that  allowing  third  parties  to  access  Plaintiff’s  ’ 
information  would  cause  damage  to  Plaintiffs. 

695.  Public  policy  voids  any  waiver  of  liability  that  FB  Defendants  may  raise. 

696.  The  contracts  between  FB  and  Plaintiffs  are  of  a  type  suitable  for  public 

regulation. 

697.  Indeed,  FB  is  subject  to  public  regulation  due  to  its  ubiquity  and  use  by  over  a 
hundred  million  of  Americans. 

698.  Using  FB  is  often  a  matter  of  practical  necessity  for  the  many  persons  and 
businesses  who  are  now  addicted  to  use  FB  to  coordinate  daily  activities,  network,  engage  in 
political  and  cultural  discourse  and  pursue  interests  and  hobbies.  To  do  these  things,  FB  users 
must  share  their  personal  information  with  their  FB  “Friends.” 

699.  FB  maintains  it  is  a  free  provider  of  communication  services  that  wants  to  connect 

every  person  on  planet  Earth 

700.  Because  of  its  enormous  financial  resources  and  monopolistic  power,  FB 
possesses  a  decisive  advantage  when  dealing  with  any  member  of  the  public  that  seeks  to  use  its 
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services,  making  any  purported  waiver  of  liability  by  FB  unconscionable  and  unlawful. 

701 .  The  confidentiality  of  Plaintiff  s  FB  user’  information  was  and  still  is  totally 
under  FB’s  control. 

702.  FB  violated  its  very  own  privacy  protection  promises  by  allowing  numerous  third 
parties  to  access  Plaintiffs  user’  information. 

703 .  Beyond  mere  negligence,  FB’s  conduct  also  constitutes  gross  negligence  due  to 
FB’s  willful  and  reckless  departure  from  ordinary  standards  of  care  and  its  knowledge  that  it  had 
failed  to  secure  the  information  of  Plaintiffs  and  did  nothing  about  it,  including  failing  to  notify 
Plaintiffs  of  its  information  privacy  protection  failures  and  doing  nothing  to  correct  those  failures 
and  even  denying  that  the  failures  occurred. 

704.  As  a  result  of  FB’s  failure  to  safeguard  Plaintiffs’  user’  information, 

Plaintiffs  have  suffered  injury,  which  includes  but  is  not  limited  to  impermissible  disclosure  of 
their  information,  both  directly  and  indirectly  by  FB,  and  exposure  to  a  heightened,  imminent 
risk  of  misuse,  fraud,  identity  theft,  voter  fraud,  medical  fraud,  and  financial  and  other  harms. 

705.  The  information  shared  by  FB  with  third  parties  allows  this 
information  to  be  aggregated  with  other  information  and  allows  third  parties  to  identify  and 
target  Plaintiffs. 

706.  The  injury  to  Plaintiffs  was  a  proximate  and  reasonably  foreseeable  result  of  FB’s 

breaches  of  its  contractual  duties  and  promises  to  Plaintiffs. 

707.  As  a  proximate  result  of  FB’s  information  privacy  protection  failures,  Plaintiffs 
suffered  damages  in  an  amount  to  be  established  at  trial. 
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COUNT  EIGHT-NEGLIGENT  AND/OR  FRAUDULENT  MISREPRESENTATION 

708.  Plaintiffs  incorporate  by  reference  all  paragraphs  of  this  Complaint  as  though 
fully  set  forth  herein. 

709.  Plaintiffs  suffered  injury  in  fact  and  lost  money  or  property  as  the  proximate 
result  of  FB’s  negligent  and/or  fraudulent  misrepresentations. 

710.  The  FB  user’  information  of  Plaintiffs  was  taken  by  third  parties  who  will  and 
did  use  it  for  their  own  advantage. 

711.  Plaintiffs  justifiably  relied  on  the  representations  FB  made  in  its  publicly 
available  privacy  policy  and  elsewhere  that  it  would  not  “share  information  we  receive 
about  you  with  others  unless  we  have:  received  your  permission  [and]  given  you  notice.” 

712.  FB  knew  the  falsity  of  its  privacy  protection  representations,  and  they  were  made 
with  the  intent  to  deceive  Plaintiffs  into  supplying  FB  with  private  confidential  personal 
information. 

713.  FB ’s  representations  regarding  the  maintenance  of  user  confidentiality  and 
privacy  were  material  to  Plaintiffs’  decision  to  provide  FB  with  the  personal  information 
FB  subsequently  disclosed  to  numerous  third  parties. 

714.  Plaintiffs  justifiably  relied  upon  the  representations  of  FB. 

715.  Plaintiffs  suffered  harm  as  a  proximate  result  of  FB’ s  fraudulent  acts. 

716.  Asa  direct  and  indirect  result  of  FB  ’  s  negligent  and/or  fraudulent 
misrepresentations.  Plaintiffs  are  entitled  to  general,  special  punitive  damages,  reasonable 
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attorneys’  fees  if  any,  and  costs,  and  any  other  relief  in  an  amount  to  be  established  at 
trial. 


COUNT  NINE  BREACH  OF  CONTRACT 

71 7.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 

Complaint  as  though  fully  set  forth  herein. 

718.  At  all  relevant  times,  FB  and  Plaintiffs  mutually  assented  to,  and 
were  bound  by  the  version  of  FB’s  “Statement  of  Rights  and  Responsibilities”  or  later, 

the  “Terms  of  Service,”  that  was  operative  at  the  time  each  of  the  Plaintiffs  registered  to  use  the 
FB  platform. 

719.  At  all  relevant  times,  FB  affirmed  that  FB  would  “not  share  your 
information  with  advertisers  without  your  consent.”  None  of  FB  contracts  informed  and  obtained 
users’  meaningful  and  lawfully  obtained  consent  to  share  their  information  with  advertisers  and 
other  third  parties,  or  disclosed  that  such  information  would  be  shared  if  FB  users’  “Friends” 
entered  into  an  agreement  which  permitted  third  parties  to  collect  their  FB  “Friends’” 
information. 

720.  Thus,  the  FB  non-negotiable,  non-negotiable  contracts  did  not  authorize  FB  to 
share  Plaintiffs’  user’  information  with  FB’s  business  partners  or  mobile  carriers,  software 
makers,  security  firms,  banks,  credit  reporting  and  government  agencies,  chip  designers,  device 
makers,  retailers,  wholesalers  or  any  other  third  party. 

721 .  The  FB  contracts  with  Plaintiffs  also  did  not  authorize  FB  to  make  the 
information  that  users  shared  with  “Friends”  available  to  any  third  party. 
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722.  Contrary  to  the  FB  contracts  with  Plaintiffs,  FB  knowingly  allowed  numerous 
third  parties  who  made  their  applications  available  through  Graph  API  v  1.0  to  sell  the 
information  regarding  Plaintiffs  that  they  had  collected  via  applications  that  used  the  FB 
platform. 

723 .  The  FB  contracts  required  FB  to  protect  the  information  of  its  users. 

724.  The  FB  contracts  affirm  that  users’  information  would  not  be  shared  with 
advertisers  or  any  other  third  party  without  their  affirmative  consent. 

725.  Likewise,  these  same  FB  “Terms  of  Service”  informed  users  that  their  privacy 

setting  would  control  who  had  access  to  their  content  and  information,  but  this 

was  untrue.  FB  did  not  disclose  that  users  were  required  to  affirmatively  “opt  out”  of  sharing 

their  information  with  third  parties  in  the  FB  contracts. 

726.  As  set  forth  herein.  Plaintiffs’  information  is  of  considerable  value  as 
demonstrated  by  FB’s  calculation  of  the  Average  Revenue  Per  User  that  FB  calculates. 

727.  There  is  an  active  market  for  the  information  generated  by  FB  users,  both 
individually  and  especially  in  the  aggregate.  FB  generates  billions  of  dollars  in  revenues 
through  targeted  advertising  delivered  to  third  parties,  curated  through  the  collection  and 
aggregation  of  FB’s  user  information. 

728.  There  is  also  an  active  black  market  for  user  information. 

729.  The  remedy  for  the  FB  breaches  of  the  FB  contracts  is  what  FB  gained  through 
their  breaches. 


137 


Complaint 


Case  # 


Case  3:19-cv-04591-SK  Document  1-1  Filed  08/07/19  Page  53  of  83 


730.  The  value  of  the  information  accumulated  by  FB  about  a  user  increases  with  the 
amount  of  information  FB  collects.  Thus,  over  time,  FB’s  benefit  of  the  bargain  has 
multiplied  dramatically. 

731.  .Asa  result  of  the  breach,  Plaintiffs  have  been  harmed  and  have  suffered 
damages  by  losing  the  value  of  their  information. 

COUNT  TEN- WILLFUL  INFLICTION  OF  EMOTIONAL  DISTRESS 

732.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 

Complaint  as  though  fully  set  forth  herein. 

733.  FB  knew  and  were  plainly  indifferent  to  the  fact  that  their  blocking  of  Plaintiffs 

FB  personal  and  business  accounts  would  cause  Zimmerman  severe  emotional  distress. 

734.  FB  knew  that  their  failure  to  protect  Plaintiffs  user’  information  from  access  by 
third  parties  not  authorized  for  such  access  by  him  would  cause  Zimmerman  severe 
emotional  distress. 

735.  FB  knew  that  Plaintiffs  plundered  FB  user’  information  was  not  intended  for  use 
in  sabotaging  the  2016  U.S.  presidential  elections  or  other  U.S.  elections  and  such  use 
would  cause  Zimmerman  severe  emotional  distress. 

736.  The  willful  unlawful  conduct  of  FB  as  set  out  in  this  Complaint  was  extreme, 
outrageous,  and  beyond  the  bounds  of  decency. 
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737.  Asa  direct  and  proximate  result  of  the  conduct  of  FB,  Zimmerman  has  suffered 
severe  or  extreme  emotional  distress,  entitling  him  to  recover  damages  in  an  amount  to  be 
established  at  trial. 

738.  The  outrageous,  malicious,  and  willful  misconduct  of  FB  conspiring  with  a  hostile 
foreign  governments  and  others  to  use  Plaintiff’s  plundered  FB  user’  information  to 
influence  the2016  U.S.  presidential  elections  and  other  purposes  entitles  Plaintiffs  to 
receive  punitive  damages  so  as  to  deter  FB  from  repeating  such  outrageous  conduct  in  the 
future. 


COUNT  ELEVEN-COMMON  LAW  CIVIL  CONSPIRACY 

739.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 

Complaint  as  though  fully  set  forth  herein. 

740.  “The  basis  of  a  civil  conspiracy  is  the  formation  of  a  group  of  two  or  more 
persons  who  have  agreed  to  a  common  plan  or  design  to  commit  a  tortious  act.’  The  conspiring 
FBs  must  also  have  actual  knowledge  that  a  tort  is  planned  and  concur  in  the  tortious 
scheme  with  knowledge  of  its  unlawful  purpose.”  See  Kidron  v.  Movie  Acquisition  Corp.,  40 
Cal.App.4th  1571,  1582  (1995).  A  conspiracy  may  be  inferred  from  circumstances,  including  the 
nature  of  the  acts  done,  the  relationships  between  the  parties,  and  the  interests  of  the  alleged  co¬ 
conspirators. 

741.  Well  before  information  repositories,  FB  knew  and  have  admitted  that  they  knew 

that  FB  was  deliberately  and  for  its  own  profit  and  other  purposes  allowing  third  parties 

to  access  and  collect  Plaintiff’s  user’  information  without  his  consent  and  that  FB’s 
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information  security  measures  were  so  grossly  inadequate  that  malevolent  third  parties 
could  also  access  and  collect  Plaintiffs  user’  information.  Nevertheless,  FB  continued  to 
recklessly  ignore  FB’s  gigantic  information  security  problem  and  instead  did  little  to 
nothing  to  protect  Plaintiff  s  FB  user’  information  or  even  bother  to  warn  them  about  the 
security  problems  and,  instead,  openly  lied  to  Congress  and  foreign  governments  that  FB 
was  dedicated  to  the  highest  and  most  advance  security  practices  and  protocols. 

742.  FB  willfully  opted  to  not  disclose  to  Plaintiffs  that  their  FB  accounts  and  associated  user 
information  are  an  easy  target  for  information  plunderers  and  that  FB  was  not  implementing 
measures  to  protect  them. 

743.  FB  conspired  among  themselves  and  with  others,  including  the  Trump  Campaign,  Robert 
Mercer  and  Russian  officials,  agents  and  operatives  to  act  in  concert  for  unlawful  purposes  by 
unlawful  means  as  described  in  detail  throughout  this  Complaint  and  have  admitted  as  much. 
See  Section  X  and  the  entirety  contained  throughout  this  Complaint. 

744.  In  particular,  FB  and  their  co-conspirators  agreed  to  publicly  disclose  on  the 
Internet  and  elsewhere  Plaintiffs  FB  user’  information  and  that  of  their  FB  “Friends”  that 
were  plundered  from  FB  by  Cambridge  Analytica,  a  now  bankrupt  business  entity  funded, 
directed  and  controlled  by  Mercer  and  deliberately  allowed  third  parties  to  access  and 
collect  Plaintiffs  FB  user’  information  without  Plaintiffs  consent  or  knowledge. 

745.  FB  conspiratorial  conduct  violated  California  civil  conspiracy  law  that  maintains 
that  a  conspiracy  is  an  agreement  by  two  or  more  persons,  Mark  Zuckerberg,  Sheryl 
Sandberg  and  other  FB  executives  to  commit  a  wrongful  act. 
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746.  Such  an  agreement  may  be  made  orally  or  in  writing  or  may  be  implied  by  the 
conduct  of  the  parties.  A  conspiracy  may  be  inferred  from  circumstances,  including  the 
nature  of  the  acts  done,  the  relationships  between  the  parties,  and  the  interests  of  the  alleged 
co-conspirators.  “While  criminal  conspiracies  involve  distinct  substantive  wrongs,  civil 
conspiracies  do  not  involve  separate  torts.  The  doctrine  provides  a  remedial  measure  for 
affixing  liability  to  all  persons  who  have  ‘agreed  to  a  common  design  to  commit  a  wrong.’” 
See  Choate  v.  County  of  Orange  (2000)  86.  Cal.App.4th  3 12,  333  [103  Cal.Rptr.2d  339]. 

747.  “As  long  as  two  or  more  persons  agree  to  perform  a  wrongful  act,  the  law  places 
civil  liability  for  the  resulting  damages  on  all  of  them,  regardless  of  whether  they  actually 
commit  the  tort  themselves.  ‘The  effect  of  charging  .  .  .conspiratorial  conduct  is  to 
implicate  all . . .  who  agree  to  the  plan  to  commit  the  wrong  as  well  as  those  who  actually 
carry  it  out.’  ”  See  Wyatt  v.  Union  Mortgage  Co.  (1979)  24  Cal.3d  773,  784  [157  Cal.  Rptr. 
392,  598  P.2d  45]. 

748.  “Conspiracy  is  not  a  cause  of  action,  but  a  legal  doctrine  that  imposes  liability  on 
persons  who,  although  not  actually  committing  a  tort  themselves,  share  with  the 
immediate  tortfeasors  a  common  plan  or  design  in  its  perpetration. 

749.  By  participation  in  a  civil  conspiracy,  a  co-conspirator  effectively  adopts  as  his  or 
her  own  the  torts  of  other  co-conspirators  within  the  ambit  of  the  conspiracy.  In  this  way, 
a  co-conspirator  incurs  tort  liability  co-equal  with  the  immediate  tortfeasors.”  See 
Applied  Equipment  Corp.  v.  Litton  Saudi  Arabia  Ltd.  (1994)  7  Cal.4th  503,  510-5 1 1  [28 
Cal.Rptr.2d  475,  869  P.2d  454] 
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750.  As  a  direct  and  proximate  result  of  the  overt  and  covert  acts  of  FB,  Plaintiffs  have 
sustained  significant  harm,  entitling  them  to  recover  damages  in  an  amount  to  established 
at  trial. 

COUNT  TWELVE-DECEIT  BY  CONCEALMENT  OR  OMISSION 

75 1.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout 
this  Complaint  as  though  fully  set  forth  herein. 

752.  Under  California  law,  a  plaintiff  may  assert  a  claim  for  deceit  by  concealment 
based  on  “[t]he  suppression  of  a  fact,  by  one  who  is  bound  to  disclose  it,  or  who  gives 
information  of  other  facts  which  are  likely  to  mislead  for  want  of  communication  of  that 
fact.”  CCC  §  1710(3). 

753.  These  following  actions  are  “deceit”  under  CCC  §  1710  because  FB  suppressed 

facts  that  they  were  duty-bound  to  disclose,  especially  given  FB’s  assertions  about  protecting 
the  privacy  of  Plaintiffs.  FB  has  committed  deceit  by  concealment  in  three  distinct  ways. 

754.  FB  did  not  disclose  known  risks  that  third  party  application  developers  would  sell  or 
disperse  user  information.  FB  received  multiple  warnings  that  Plaintiffs’  information  was  at 
risk. 

755.  In  2012,  Sandy  Parakilas,  former  FB  operations  manager,  warned  FB’s  executives  about 
the  risks  of  application  developers  gaining  unfettered  access  to  users’  personal  information 
without  their  consent  on  FB’s  platform.  Yet,  FB  ignored  Parakilas’ s  warnings. 
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756.  In  October  20 1 2,  FB  reached  a  settlement  with  the  FT C  agreeing  to  clearly  and  prominently 
disclose  its  sharing  of  information  with  third  parties;  yet,  FB  continued  to  let  application 
developers  access  users’  information  without  their  consent. 

757.  As  late  as  2017,  Alex  Stamos,  FB’s  former  Chief  of  Security,  warned  FB  executives  about 
security  risks  on  the  platform.  In  an  internal  meeting  held  in  2017,  Stamos  warned  of  “willful 
decisions  to  give  unfettered  access  to  information  and  systems  to  engineers  to  make  them 
'move  fast'  but  that  creates  other  issues  for  us.” 

758.  In  2017,  Stamos  states  that  he  provided  a  written  report  concerning  the  circumstances 
leading  to  Cambridge  Analytica  obtaining  users’  personal  information.  FB  edited  and 
published  a  whitewashed  version  of  this  report  concealing  any  wrongdoing. 

759.  FB  did  not  audit  what  happened  to  information  that  was  provided  to  third  parties 

because  it  knew  it  would  find  abuse.  FB  did  not  disclose  to  Plaintiffs  the  risks  that  they  faced  from 
these  warnings  and  did  not  inform  Plaintiffs  that  their  information  was  insecure  once  it  was  shared 
with  application  developers  or  other  third  parties. 

760.  FB  knew  that  Plaintiffs’  information  was  not  secure.  Even  so,  FB  ignored  the 
warnings  above  that  audits  were  necessary  to  secure  Plaintiffs’  information  because  FBs 
did  not  know  what  third  parties  were  doing  with  it  after  it  left  FB’s  servers. 

761.  FB  willfully,  deceptively  and  recklessly  failed  to  secure  Plaintiffs’  FB  user’ 

information  and  content  because  they  wanted  to  encourage  application  developers,  FB 

business  partners  and  numerous  other  third  parties  to  exploit  that  information  and  content. 

FBs  knew  that  appropriate  security  measures,  such  as  audits,  would  discourage  third 
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parties.  FBs  did  not  engage  in  such  audits  or  conduct  other  reasonable  efforts  to  protect 
Plaintiffs’  information. 

762.  FB  had  a  duty  to  inform  Plaintiffs  that  FB  had  become  aware  that  they  had  failed 
to  secure  their  information.  FB  knew  in  2015  that  it  had  failed  to  secure  Plaintiffs’ 
information,  including  by  making  it  available  to  numerous  third  parties. 

763.  FB  willfully  concealed  that  Plaintiffs’  FB  user  information  and  content  was 
insecure  because  they  wanted  Plaintiffs  to  continue  to  generate  content  for  their  business 
partners. 

764.  FB  failed  to  disclose  the  risks  Plaintiffs  faced  with  the  intention  to  deceive 
them  about  the  security  of  their  information. 

765.  FB  failed  to  disclose  to  Plaintiffs  that  it  had  failed  to  secure  information  for  dozens  of 
other  third  party  Applications,  even  after  they  became  aware  of  the  Cambridge  Analytica 
unlawful  misappropriation  of  FB  user’  information  from  tens-of-millions  of  FB  users  and 
failed  to  conduct  any  investigation  into  the  extent  or  use  of  the  FB  user’  information  to  which 
it  until  March  of  201 8. 

766.  Plaintiffs  been  aware  that  FB  had  failed  to  implement  adequate  security  measures,  they 
would  not  have  shared  their  information  and  content  with  FB  to  the  extent  that  they  did,  if  at 
all. 

767.  Plaintiffs  were  damaged  because,  as  a  result  of  FBs’  deceit,  their  content  and  information 
have  been  disclosed  to  third  parties  without  their  consent. 

768.  Plaintiffs  were  also  damaged  because,  as  a  result  of  FBs’  deceit,  their  privacy  was 
invaded. 
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769.  Plaintiffs  are  at  heightened  risk  of  identity  theft,  phishing  schemes,  and  other  malicious 
attacks.  Due  to  FB’s  deceit,  Plaintiffs’  information  and  content  were  compromised,  and  may 
be  available  on  the  dark  web  or  in  the  hands  of  foreign  nationals. 

770.  Plaintiffs  are  therefore  entitled  to  “any  damage”  that  they  have  suffered  under  CCC 
Section  1709. 

771 .  FB  have  also  committed  deceit  by  failing  to  meaningfully  disclose  to  Plaintiffs 

how  FB  allows  other  third  parties,  including  but  not  limited  to  application  developers, 
“whitelisted”  applications,  device  makers,  mobile  carriers,  software  makers,  and  others  to 
obtain  their  FB  user’  information  notwithstanding  their  privacy  settings. 

772.  With  respect  to  “whitelisted”  applications,  FB  failed  to  disclose  that  FB  would  provide 
the  applications  with  FB  users’  information  as  long  as  the  “whitelisted”  applications  provided 
FB  with  revenues  that  were  based  on  how  many  FB  users’  information  they  accessed. 

773.  FB  failed  to  disclose  that  these  FB  users  and  their  “Friends”  could  not  control 
“whitelisted”  applications’  access  with  their  privacy  settings. 

774.  FB  allowed  “whitelisted”  applications  to  continue  to  receive  information  from  users  and 
their  “Friends”  notwithstanding  users’  privacy  settings. 

775.  FB  stripped  privacy  settings  from  photos  and  videos  that  had  been  designated  private,  in 
violation  of  its  own  privacy  policies.  As  a  result,  those  applications  could  not  honor  users’ 
privacy  settings. 
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776.  In  addition,  computer  applications  were  able  to  circumvent  FB  user’s  privacy  of  platform 
settings  and  access  FB  “Friend’s”  information,  even  when  the  FB  user  disabled  the  FB 
Platform. 

777.  FB  misled  users  to  believe  that  they  were  protecting  users’  privacy  and  failed  to  disclose 
that  they  were  sharing  users’  information  with  third  parties. 

778.  FB  did  not  disclose  that,  notwithstanding  privacy  settings  that  purported  toprovide 
Plaintiffs  with  control  over  their  information,  FB  allowed  third  -parties  to  harvest  and  store 
personal  information. 

779.  FB  had  a  duty  to  provide  accurate  information  to  Plaintiffs  about  how  their  information 
was  disclosed  to  third  parties  by  FB.  FBs  knew  that  Plaintiffs  shared  personal  and  sometimes 
intimate  details  about  their  lives,  personalities,  and  identities. 

780.  FB  encouraged  Plaintiffs  to  share  information  by  assuring  them  that  FB  would  respect 
their  choices  concerning  privacy. 

781.  FB  willfully  concealed  and  omitted  material  information  regarding  how  FB 
disclosed  Plaintiffs’  information  in  an  effort  to  create  a  false  sense  of  security  and 
privacy  for  Plaintiffs. 

782.  FB  did  this  because  they  wanted  Plaintiffs  to  provide  more  detailed  information,  whose 
value  would  be  increased  by  that  additional  detail.  Third  parties  would  thereby  pay  a  higher 
price  for  unfettered  access  to  that  information,  increasing  FB’s  revenue. 
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783 .  Had  Plaintiffs  been  aware  of  the  full  extent  of  ho  w  FB  collected  and  used  their 
information,  they  would  not  have  shared  their  information  on  their  devices  on  the  FB 
platform  to  the  same  degree  that  they  did,  if  at  all. 

784.  Plaintiffs  were  damaged  because  their  information  was  disclosed  to  third  party  device 
makers  and  others  without  their  consent. 

785.  Asa  result  of  the  disclosures  of  Plaintiffs’  FB  user’  information  to  these  third  parties. 
Plaintiffs  could  not  take  remedial  measures  to  protect  themselves  from  identity  theft,  scams, 
phishing,  unwanted  political  targeting,  even  surveillance  and  other  forms  of  harassment. 

786.  Moreover,  Plaintiffs  would  have  behaved  differently  and  shared  less  information  had 
these  acts  been  disclosed. 

787.  FB  deliberately  withheld  notice  because  it  did  not  want  to  discourage  user  sharing  and 
engagement  on  its  platform. 

788.  FB  also  failed  to  disclose  to  Plaintiffs  how  their  Fb  user’  information  was  being 
collected,  shared  and  aggregated  to  develop  digital  profiles  or  dossiers  of  each  FB  user. 

789.  Those  dossiers  comprised  of  FB  user  information  were  combined  with  other  sources  to 
de-anonymize  this  information  such  that  FB  users  could  be  individual  targeted. 

790.  FB  had  a  duty  to  disclose  the  full  extent  to  which  it  allowed  Plaintiffs  to  be  targeted  by 
advertisers  and  marketers  because  it  promised  in  its  Contracts  that  it  would  not  share  users’ 
information  with  advertisers  without  their  consent.  FBs’  duty  also  arose  from  its  affirmative 
representations  that  (1)  Plaintiffs  could  control  their  information,  and  (2)  third  parties  could 
not  access  personal  information  absent  users’  consent. 
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791 .  FB  knew  that  advertisers  were  targeting  Plaintiffs  with  messages  based  upon  FB  derived 
information,  combined  with  information  derived  from  other  information  brokers. 

792.  FB  was  the  vehicle  to  target  Plaintiffs  by  drawing  upon  the  vast  amounts  of  content 
information  collected  by  FB  and  matched  with  additional  information  collected  about  them 
by  third  party  information  brokers. 

793.  FB  knew  that  psychographic  marketing  and  other  targeted  advertising  was  lucrative,  and 
that  advertisers  paid  a  premium  to  combine  FB  user’  information  with  information  from  third 
party  information  brokers. 

794.  FB  did  not  disclose  to  Plaintiffs  that  advertisers  were  combining  information  from 
information  brokers  with  FB-derived  information  to  target  them  with  advertisements  and 
psychographic  marketing,  as  well  as  building  digital  dossiers. 

795.  FB  intended  to  deceive  Plaintiffs  about  their  vulnerability  to  targeted  advertisements  and 
about  the  degree  to  which  sharing  their  FB  user’  information  and  content  on  FB  directly  led 
to  targeted  messaging. 

796.  Had  Plaintiffs  known  the  extent  to  which  FB  shared  their  information  with  third  parties, 
and  how  it  was  aggregated  and  made  available  to  advertisers  and  political  operatives  and 
others.  Plaintiffs  would  have  not  shared  their  information  and  content  on  FB  to  the  extent  that 
they  did,  if  it  all. 

797.  Plaintiffs  suffered  injury  as  a  direct  result  of  FB’  deceit. 
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798.  Plaintiffs  FB  user’  information  and  content  were  used  and  aggregated  by  advertisers  and 
other  third  parties  without  their  consent,  and  for  nefarious  purposes  and  in  return  FB  received 
substantial  advertising  revenues. 

799.  Had  Plaintiffs  known  the  extent  and  degree  to  which  their  FB  user’  information  was 
provided  to  third  parties  Plaintiffs  would  have  required  compensation  for  this  use  of  their  FB 
user  information. 

800.  Plaintiffs  suffered  economic  injury  as  a  result  of  FB’s  fraud.  Plaintiffs  have  an  economic 

and  privacy  interest  in  their  FB  user’  information,  which  has  value  beyond  the  FB  platform. 

801.  FB  knew  that  Plaintiff  s  FB  user’  information  was  worth  at  least  $0. 1 0  for  each 

application  to  view  a  FB  user’s  profile,  and  FB  orchestrated  its  “whitelisting”  to  require 
applications  to  pay  to  FB  revenues  that  were  equivalent  to  the  number  of  Fb  users  and 
their  “Friends”  that  each  application  had. 

802.  As  a  result,  FB  have  been  unjustly  enriched  by  its  deceit,  and  Plaintiffs  are  entitled  to 
restitution. 

803 .  Restitution  i  s  a  remedy  that  may  b  e  awarded  to  prevent  unjust  enrichment  when  the  FB 
has  obtained  some  benefit  from  Plaintiffs  through  fraud,  duress,  conversion  or  similar 
misconduct.  See  McBride  v.  Boughton,  123  Cal.App.4th  379,  387-388  (2004). 

804.  For  all  types  of  fraudulent  omissions  complained  of  here,  Plaintiffs  s  seek  disgorgement 
of  FB’s  profits  that  were  made  with  the  use  of  Plaintiff’s  FB  user’  information. 
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805.  Disgorgement  is  appropriate  because  FB  profited  from  Plaintiffs’  content  and  information 
wrongfully  obtained  by  generating  revenues  from  third  party  computer  application 
developers  and  advertisers. 

806.  Disgorgement  is  necessary  in  order  to  deter  future  unauthorized  use  of  Plaintiff’s  FB 
user’  information.  Disgorgement  is  also  necessary  to  the  extent  that  the  value  of  Plaintiff  s 
user’  information  cannot  be  assessed  by  ordinary  tort  damages.  Public  policy  supports  the  use 
of  disgorgement  here  to  disincentivize  the  type  of  deception  that  FB  used  in  exploiting 
Plaintiff’s  FB  user  information. 

807.  In  the  future,  as  a  direct  result  of  FB’s  unlawful  conduct  Plaintiffs  may  also  suffer  further 
damages  of  a  nature  that  are  purely  speculative  at  this  time. 

808.  Accordingly,  as  a  result  of  the  misconduct  of  FB,  Plaintiffs  are  entitled  to  recover 
damages,  including  punitive  damages  under  CCC  §  3294(a)  in  an  amount  to  be  established  at 
trial. 


COUNT  THIRTEEN-FRAUD 

809.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

810.  FB  deceit  as  alleged  herein  is  fraud  under  CCC  §  3294(c)(3)  in  that  it  was  deceit 
or  concealment  of  a  material  fact  known  to  the  FB  and  FB  willfully  deprived  Plaintiffs  of 
legal  rights  and  otherwise  caused  injury  to  them. 

811.  “The  elements  of  fraud  that  will  give  rise  to  a  tort  action  for  deceit  are:  “(a) 
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misrepresentation  (false  representation,  concealment,  or  nondisclosure);  (b)  knowledge  of  falsity 
(or  ‘scienter’);  (c)  intent  to  defraud,  i.e.,  to  induce  reliance;  (d)  justifiable  reliance;  and  (e) 
resulting  damage.’  ”  See  Engalla  v.  Permanente  Medical  Group,  Inc.  (1997)  15  Cal. 4th  951, 974 
[64  Cal.Rptr.2d  843,  938  P.2d  903];  Medallion,  Inc.  v.  Clorox  Co.  (1996)  44  Cal.App.4th  1807, 
1816  [52  Cal.Rptr.2d  650]  [combining  misrepresentation  and  scienter  as  a  single  element]. 

812.  “Fraud  is  a  willful  tort;  it  is  the  element  of  fraudulent  intent,  or  intent  to 
deceive,  that  distinguishes  it  from  actionable  negligent  misrepresentation  and 

from  nonactionable  innocent  misrepresentation. 

813.  It  is  the  element  of  intent  which  makes  fraud  actionable,  irrespective  of  any 
contractual  or  fiduciary  duty  one  party  might  owe  to  the  other.”  See  City  of  Atascadero  v. 
Merrill  Lynch,  Pierce,  Fenner  &  Smith  (1998)  68  Cal.App.4th  445,  482  [80  Cal.Rptr.2d 
329].  Fraudulent  intent  is  an  issue  for  the  trier  of  fact  to  decide.”  See  Beckwith  v.  Dahl, 
(2012)  205  Cal.App.4th  1039,  1061. 

814.  Asa  direct  and  proximate  result  of  the  overt  and  covert  acts  of  FB  as  alleged  throughout 
this  Complaint,  Plaintiffs  have  sustained  significant  harm,  entitling  them  to  recover  damages 
in  an  amount  to  established  at  trial. 

COUNT  FOURTEEN-  WILLFUL  MISREPRESENTATION 

815.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

816.  Plaintiffs  claim  that  FB  willfully  and  for  profit  and  other  purposes  made  at  least 

one  important  false  representation  that  substantially  harmed  Plaintiffs,  that  being  that 

they  would  protect  the  privacy  of  Plaintiff  s  FB  user’  information. 
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817.  When  the  FB  made  that  false  representation,  they  knew  it  was  false  and 
misleading  and  made  it  with  a  conscious  and  reckless  disregard  for  the  truth. 

818.  FB  intended  that  Plaintiffs  rely  on  their  misrepresentation. 

819.  Zimmerman  did  reasonably  rely  on  FB’ s  misrepresentation. 

820.  Plaintiffs  were  harmed  and  Plaintiff  Zimmerman’s  reliance  on  FB’ s 
representation  was  a  substantial  factor  in  causing  that  harm. 

821 .  These  willful  misrepresentations  by  FB  constitute  “deceit”  under  CCC  §  1 7 1 0  in 
that  it  is  suppression  of  a  fact  by  one  who  is  bound  to  disclose  it,  or  who  gives 
information  of  other  facts  which  are  likely  to  mislead  for  want  of  communication  of  that 
fact. 

822.  As  a  result  of  this  deceitful  misrepresentation  by  FB  the  user’  information  of 
Plaintiffs  was  compromised,  placing  Plaintiffs  at  a  great  risk  of  identity  theft  and  other 
crimes. 

823.  As  a  result  of  FB’s  deceitful  misrepresentations,  FB  Defendants  are  liable  under 
CCC  §  1709  for  the  damage  their  conduct  inflicted  on  Plaintiffs. 

824.  Plaintiffs  also  suffered  diminution  in  value  of  their  information  in  that  it  may  now 
or  in  the  future  be  readily  available  to  plunderers  on  the  “Dark  Web”  and  elsewhere. 

825.  Plaintiffs  may  also  suffer  consequential  out  of  pocket  losses  for  procuring  credit 
freeze  or  protection  services. 
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826.  As  a  result  of  the  conduct  of  FB  Defendants,  Plaintiffs  are  entitled  to  recover 
damages,  including  punitive  damages  under  CCC  §  3294(a)  in  an  amount  to  be 
established  at  trial. 

COUNT  FIFTEEN-CIVIL  RICO  CONSPIRACY 

827.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

828.  Plaintiffs  assert  FB  Defendants’  violations  of  1 8  U.S.C.  §  1962(C)  and  the 
Enterprise  constitutes  a  RICO  Enterprise  pursuant  to  18  U.S.C.  §  1961(4). 

829.  The  RICO  Enterprise  and/or  the  RICO  Association-in-Fact  Enterprise 
(“Enterprise”)  has  been  operating  since  at  least  2014  and  at  various  times  was  and  for  the 
most  part  still  is  composed  of  FB  Defendants,  Russian  officials,  intelligence  agents  and 
operatives,  the  Trump  Campaign,  Aleksandr  Kogan,  Robert  Mercer,  Jared  Kushner, 

Cambridge  Analytica,  Stephen  Bannon  and  numerous  other  persons  and  entities. 

830.  The  Enterprise  engaged  in,  and  still  engages  in,  activities  that  affect 
interstate  commerce. 

83 1 .  The  Enterprise  was  formed  for  the  purpose  of  using  unlawfully  obtained  FB  user’ 
information  and  other  unlawfully  obtained  information  for  the  targeted  transmission  to 
prospective  voters  of  political  propaganda,  misinformation,  disinformation,  misleading 
political  advertising  and  other  messaging.to,  as  matters  turned  out,  successfully  help  sabotage 
the  2016  U.S.  election  cycle. 

832.  Aleksandr  Kogan  participated  in  the  Enterprise  by  (i)  creating  a  U.K.  company 
that  was  part  of  a  scheme  to  dupe  FB  users’  into  providing  their  FB  user’  information  to 
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to  the  U.K.  company,  which  was  part  of  a  broader  scheme  to  unlawfully  plunder  the  FB 
user’  information  of  tens-of-millions  of  FB  users. 

833.  Bannon  participated  in  the  Enterprise  by,  among  other  things:  (i)  helping  to  found 
Cambridge  Analytica  by  obtaining  funding  for  Cambridge  Analytica  from  Robert  Mercer 
(a  U.S.  citizen);  (ii)  acting  as  a  vice-president  of  Cambridge  Analytica;  (iii)  helping  to 
supervise  the  activities  of  Cambridge  Analytica;  and  (iv)  serving  as  a  senior  political 
advisor  to  the  Trump  Campaign  and  the  Trump  administration. 

834.  These  actions  were  undertaken  with  fraud,  malice  and  a  willful  conscious 
disregard  of  the  rights  or  safety  of  Plaintiffs  and  the  majority  of  Americans  who  voted  in 
the  2016  presidential  election  cycle. . 

835.  FB  Defendants  agreed  to  and  did  conduct  and  participate,  directly  and  indirectly, 
in  the  conduct  of  the  Enterprise’s  affairs  in  a  pattern  of  racketeering  activity. 

836.  Prior  to  and  concurrent  with  its  participation  in  the  Enterprise,  FB  willfully  and 
recklessly  devised  a  scheme  with  artifice  to  defraud  FB  users  and  to  obtain,  sell,  trade 
and  use  FB  user’s  information  by  false  pretenses  and  representations,  including,  but  not 
limited  to,  the  representation  that  the  information  would  only  be  used  for  academic 
purposes. 

837.  The  payments  made  to  takers  of  the  “This  is  Your  Digital  Life”  quiz  were  in 
furtherance  of  the  fraudulent  scheme  and  were  made  by  wire  transfer  or  other  electronic 
means  through  interstate  or  foreign  commerce. 
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838.  The  acts  of  wire  fraud  averred  herein  also  constitute  a  pattern  of  racketeering 
activity  pursuant  to  18U.S.C.  §  1961(5). 

839.  FB  aided  and  abetted  the  co-conspirators  by  misleading  its  users  to  believe  that 
their  FB  us’  information  was  safe,  while  allowing  numerous  third  parties  to  access  and 
use  the  information  of  non-consenting  FB  users  without  their  permission  and  knowledge. 

840.  FB  directly  participated  in  the  conspiracy  by  misleading  quiz-takers  that  they 
were  allowing  third  parties  unfettered  access  to  only  their  information  for  academic 
purposes  only,  when  in  fact  they  were  allowing  unfettered  access  to  their  FB  “Friends’” 
information,  and  by  fraudulently  obtaining  the  information,  selling  it  and  trading  it  in 
interstate  and  foreign  commerce,  and  using  it  to  sabotage  elections. 

841 .  Plaintiffs  were  harmed  by  FB  conduct  because  the  private  information  they  did 
not  intend  to  become  public  or  disclose  to  third  parties  was  acquired  by  persons  and 
entities  who  used  it  to  unlawfully  sabotage  elections  and  other  nefarious  purposes. 

842.  Furthermore,  the  security  breach  put  Plaintiffs  are  in  imminent  and  real  danger  of 
having  their  identities  stolen  by  anyone  willing  to  pay  these  unscrupulous  companies  for 
their  FB  user’  information. 

843.  In  addition,  Plaintiffs  spent  considerable  time  and  money  unsuccessfully 
attempting  protect  against  the  misuse  of  their  plundered  FB  user  information. 

844.  As  a  direct  and  proximate  FB  Defendants  racketeering  activities  and  violations  of 
18  U.S.C.  §  1962(c),  Plaintiffs  have  been  injured  and  request  judgment  in  their  favor  and 
against  FB  Defendants  for  compensatory,  treble  and/or  punitive  damages  with  interest, 
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the  costs  of  suit  and  attorneys’  fees,  if  any, ,  and  other  and  further  relief  as  this  Court 
deems  just  and  proper. 

COUNT  SIXTEEN- VIOLATION  OF  THE  STORED  COMMUNICATIONS  ACT 

845.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

846.  The  Stored  Communications  Act  (“SCA”)  allows  a  private  right  of  action  against 
anyone  who  “(1)  willfully  accesses  without  authorization  a  facility  through  which  an 
electronic  communication  service  is  provided;  or  (2)  willfully  exceeds  an  authorization  to 
access  that  facility;  and  thereby  obtains,  alters,  or  prevents  authorized  unfettered  access  to  a  wire 
or  electronic  communication  while  it  is  in  electronic  storage  in  such  system.”  See  1 8  U.S.C. 

§  2701(a);  see  also  18  U.S.C.  §  2707(a). 

847.  The  Electronic  Communications  Privacy  Act,  18  U.S.C.  §§  2510,  defines 

an  “electronic  communication”  as  “any  transfer  of  signs,  signals,  writing,  images,  sounds,  data, 
or  intelligence  of  any  nature  transmitted  in  whole  or  in  part  by  a  wire,  radio,  electromagnetic, 
photoelectronic  or  photooptical  system  that  affects  interstate  or  foreign  commerce.”  1 8  U.S.C. 

§  2510(12).  The  SCA  incorporates  this  definition  of  “electronic  communication.” 

848.  To  create  the  information  transferred  to  FB  such  as  all  posts,  private  messages,  and 
similar  communication  (collectively  “FB  user’  information”  or  “content”),  FB  users  transmit 
writing,  images,  or  other  data  via  the  Internet  from  their  computers  or  mobile  devices  to  FB’s 
servers.  This  FB  content,  therefore,  constitutes  electronic  communications  for  purposes  of  the 
SCA. 

849.  The  SCA  distinguishes  between  two  types  of  electronic  storage.  The  first  is  defined  as 
any  temporary,  intermediate  storage  of  a  wire  or  electronic  communication  incidental  to  the 
electronic  transmission  thereof.”  18  U.S.C.  §  2510(17)(A).  The  second  type  is  defined  as  “any 
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storage  of  such  communication  by  an  electronic  communication  for  purposes  of  backup 
protection  of  such  communication.”  18  U.S.C.  §  2510(17)(B). 

850.  FB  saves  and  stores  FB  user  information  indefinitely  in  electronic 
storage  repositories. 

85 1 .  Plaintiffs  did  not  authorize  FB  to  share  their  user  information  with  any  third 
party. 

852.  Pursuant  to  1 8  U.S.C.  §  2702(a)(2),  before  their  FB  accounts  were  blocked  by  FB, 
Plaintiffs  were  users  of  FB’s  remote  computing  service. 

853.  By  definition,  because  FB  provides  the  ability  to  send  or  receive  wire  or 
electronic  communications,  FB  is  an  electronic  communication  service  within  the  meaning  of  the 
SCA. 

854.  Pursuant  to  1 8  U.S.C.  §2510(13,  )before  their  FB  accounts  were  blocked  by  FB, 
Plaintiffs  were  users  of  FB’s  electronic  communication  service. 

855.  Pursuant  to  18  U.S.C.  §§  2707(a)  and  2510(11),  Plaintiffs  were  FB  registered 
users  who  were  harmed  by  FB’s  violations  of  the  SCA. 

856.  Because  it  provides  computer  storage  and  processing  services  by  means  of  an 
electronic  communications  system,  FB  is  a  remote  computer  service  within  the  meaning  of  the 
SCA. 

857.  Pursuant  to  18  U.S.C.  §§  2702(a)(1)  and  2510(15),  FB  is  a  provider  of  an 
electronic  communication  service  to  the  public. 

858.  Pursuant  to  1 8  U.S.C.  §  2701(a),  FB  maintains  facilities  through  which  an 
electronic  communication  service  is  provided. 

859.  Pursuant  to  18  U.S.C.  §§  2702(a)(2)  and  271 1(2)FB  is  a  provider  of  a  remote 
computing  service  to  the  public. 
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860.  Pursuant  to  18  U.S.C.  §  2510(6)  and  18  U.S.C.  §  2707(a)FB  Defendants  are 
persons  or  entities  within  the  meaning  of  the  SC  A. 

861.  Pursuant  to  18  U.S.C.  §§  2501(12),  Plaintiffs  use  of  FB’s  messaging  systems  and 
transfers  of  information  to  FB  constitute  electronic  communications. 

862.  Pursuant  to  1 8  U.S.C.  2501(17),  Plaintiffs’  electronic  communications  were  in 
electronic  storage  repositories. 

863.  Pursuant  to  1 8  U.S.C.  §  §2701(a)  and  2702(a)(1),  FBs  violated  the  SCA  by 

allowing  access  to  third  parties  to  FB’s  information  repository  that  stored  FB  user’  information 
and  electronic  communications,  including  Plaintiffs,  and  by  knowingly  divulging  the  contents, 
including  Plaintiffs’,  electronic  communications  to  numerous  FB  authorized  third  parties  and 
unauthorized  third  parties. 

864.  Pursuant  to  1 8  U.S.C.  §  2702(a)(2),.FB  also  violated  the  SCA  by  knowingly 
divulging  the  contents  of  Plaintiffs’  electronic  communications  that  were  carried  or 
maintained  on  FB’s  remote  computing  service  to  numerous  unauthorized  third  parties. 

865.  The  contents  of  Plaintiffs’  electronic  communications  that  FB  divulged  to  unauthorized 
parties  were  non-public,  and  Plaintiffs  reasonably  believed  that  the  contents  of  these 
communications  would  be  protected  against  publication  to  unauthorized  parties. 

866.  The  subsequent  disclosure  of  FB  user  information  by  applications  and  business 
partners  to  additional  unauthorized  third  parties  was  reasonably  foreseeable,  and  FB 
knew  or  should  have  known  about  this  subsequent  disclosure. 

867.  FB  also  failed  to  effectively  audit,  limit,  or  control  computer  applications  or 
business  partners  or  numerous  other  third  parties  from  accessing  FB  user’  information  so 
as  to  prevent  the  subsequent  disclosure  of  that  FB  user  information. 
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868.  FB  directly  profited  from  the  disclosure  of  FB  user’  information,  through 
advertisements  placed  by  unauthorized  parties  that  received  FB  user  information  from 
applications  or  business  partners,  or  numerous  other  third  parties  including  Cambridge 
Analytica. 

869.  FB  users  of  computer  applications,  such  as  “This  Is  Your  Digital  Life,”  were  not  aware  of 
and  did  not  consent  to  the  disclosure  of  the  contents  of  their  electronic  communications  and 
their  FB  user’  information  and  that  of  their  “Friends”  to  unauthorized  parties,  including 
Cambridge  Analytica,  FB  business  partners,  advertisers,  and  information  brokers. 

870.  As  a  result  of  FBs’  violations  of  the  SC  A,  Plaintiffs  have  suffered  injury,  including  but 
not  limited  to  the  invasion  of  Plaintiffs’  privacy  rights. 

871 .  Pursuant  to  1 8  U.S.C.  §  2707(c),  FB  Defendants  profited  through  their  violations 
of  the  SCA,  and  Plaintiffs  suffered  actual  damages  as  a  result  of  these  violations. 

872.  Plaintiffs  are  also  entitled  to  preliminary  and  other  equitable  or  declaratory  relief 
as  may  be  appropriate,  as  well  as  reasonable  attorneys’  fees,  if  any,  and  litigation  costs 
pursuant  tol8  U.S.C.  §  2707(b). 

873.  FB’s  violations  of  the  SCA  were  committed  deceptively,  willfully  and  recklessly 
and  with  malice. 

874.  Accordingly,  Plaintiffs  also  seek  punitive  damages  pursuant  to  1 8  U.S.C.  § 
2707(c). 
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COUNT  SEVENTEEN-VIOLATION  OF  CALIFORNIA’S  COMPUTER  DATA  ACCESS 

AND  FRAUD  ACT 

875.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

876.  FB  knowingly  accessed  and  without  permission  used  Plaintiffs’  content  and 
information  in  order  to  wrongfully  control  or  obtain  property  or  information  in  violation 
of  CPC  §  502(c)(1). 

877.  FB’  knowingly  accessed  and  without  permission  took,  copied,  and/or  used 
information  from  Plaintiffs’  computers,  computer  systems  and/or  computer  network  in 
violation  of  CPC  §  502(c)(2). 

878.  FB’  knowingly  and  without  permission  used  or  caused  to  be  used  Plaintiffs’ 
computer  services  in  violation  of  CPC  §  502(c)(3). 

879.  FB’  knowingly  and  without  permission  accessed  or  caused  to  be  accessed 
Plaintiffs’  computers,  computer  systems,  and/or  computer  network  in  violation  of  CPC  § 
502(c)(7). 

880.  Plaintiffs  suffered  and  continue  to  suffer  damage  as  a  result  of  FB’s  violations  of 
CPC  §  502. 

881 .  FB’  conduct  also  caused  irreparable  and  incalculable  harm  and  injuries  to 
Plaintiffs  in  the  form  of  invading  their  privacy,  and,  unless  enjoined,  will  cause  further 
irreparable  and  incalculable  injury,  for  which  Plaintiffs  have  no  adequate  remedy  at  law. 

882.  FB’  willfully  violated  CPC  §  502  in  disregard  and  derogation  of  the  rights  of 
Plaintiffs,  and  FB’s  actions  as  alleged  above  were  carried  out  with  oppression,  fraud  and  malice. 

883.  Pursuant  to  CPC  §  502(e),  Plaintiffs  are  entitled  to  injunctive  relief, 
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compensatory  damages,  punitive  or  exemplary  damages,  attorneys’  fees,  costs  and  other 
equitable  relief. 

COUNT  EIGHTEEN-VIOLATIONS  OF  THE  CALIFORNIA 
UNFAIR  COMPTITION  LAW 

884.  Plaintiffs  incorporate  by  reference  all  paragraphs  contained  throughout  this 
Complaint  as  though  fully  set  forth  herein. 

885.  The  conduct  of  FB  Defendants  as  alleged  herein  constitutes  unfair,  unlawful  and 
fraudulent  business  acts  and  practices  as  proscribed  by  California’s  Unfair  Competition 
Law  (“UCL”),  Cal.  Bus.  &Prof.  Code  §  17200. 

886.  FB  violated  Plaintiffs’  privacy  by  allowing  their  FB  user’  information  to  be 
exploited  in  ways  that  Plaintiffs  could  not  have  been  foreseen. 

887.  Plaintiffs  interests  were  also  violated  by  FB  Defendants  numerous  deceptions. 

888.  Had  Plaintiffs  known  the  extent  to  which  FB  allowed  their  personal  content  to  be 
collected,  aggregated,  pooled,  and  transferred  for  commercial  purposes  to  companies 
such  as  Cambridge  Analytica  and  numerous  other  third  parties.  Plaintiffs  would  not  have 
placed  their  information  on  FB  to  the  same  extent  they  did,  if  at  all. 

889.  FB  allowed  third  party  application  developers,  FB  business  partners,  device 
makers  and  numerous  other  third  parties  to  harvest  Plaintiffs  FB  users’  content  and 
information  and  that  of  their  FB  “Friends”  on  a  mammoth  scale  with  zero  notice  to 
Plaintiffs. 

890.  FB  had  a  duty  to  disclose  the  nature  and  extent  of  the  harvesting  of  their  FB  user’ 

information  by  third  parties. 
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891 .  FB’s  conduct  was  and  is  unfair. 

892.  California  has  a  strong  public  policy  intended  to  protect  Plaintiffs  information 
privacy  interests. 

893.  FB  violated  California’s  public  policy  by  exploiting  Plaintiffs’ 
information  without  Plaintiffs  informed  consent. 

894.  FB’s  conduct  also  violated  the  interests  protected  by  the  Video  Privacy 
Protection  Act,  18  U.S.C.  §  2710;  the  Stored  Communications  Act,  18  U.S.C.  §  2701  et  seq.; 
Cal.  Civ.  Code  §§  1709,  1710  and  Article  1,  §  1  of  the  California  Constitution. 

895.  To  establish  liability  under  the  unfair  prong,  Plaintiffs  need  not  establish  that 
these  statutes  were  actually  violated,  although  the  claims  pleaded  herein  do  that 

896.  FB  never  informed  Plaintiffs  of  the  uses  of  their  FB  user’  information 

by  FB  and  invaded  Plaintiffs’  privacy  by  subjecting  their  information  to  largescale  third  party 
access  and  plundering  without  Plaintiffs  knowledge  or  meaningful  consent. 

897.  FB’s  unlawful  conduct  included  stripping  Plaintiffs’  privacy  metainformation 
from  their  photos  and  videos  and  allowing  numerous  third  parties  to  access  and  plunder 
Plaintiffs  FB  user  information. 

898.  Plaintiffs  could  not  have  anticipated  FB’s  intrusion  into  their  privacy. 

899.  FB’  conduct  did  not  create  a  benefit  that  outweighs  these  strong  public  policy 
interests.  FB’s  conduct  benefitted  FB  and  its  business  partners  and  numerous  other  third  parties 
at  the  expense  of  the  privacy  of  hundreds-of-  millions  of  FB  users,  including  Plaintiffs. 

900.  Additionally,  the  effects  of  FB’s  conduct  were  comparable  to  or  substantially  the 

same  as  the  conduct  forbidden  by  the  California  Constitution  and  the  common  law’s 
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prohibitions  against  invasion  of  privacy,  in  that  FB’s  conduct  invaded  fundamental 
privacy  interests. 

901 .  FB’s  conduct  violated  the  spirit  and  letter  of  the  several  laws  that  protect 
privacy  interests  and  prohibit  misleading  and  deceptive  practices. 

902.  The  FB  user’  information  that  FB  allowed  third  parties  to  access  and  plunder 
exposed  Plaintiffs  to  an  increased  risk  of  identity  theft,  voter  fraud,  tax  return  fraud  and  allowed 
third  parties  to  link  their  identities  to  other  information  in  order  to  de-anonymize  them. 

903.  FB’s  conduct  is  fraudulent.  FB  intentionally  and  deceptively  misled  Plaintiffs 
concerning  the  use  of  their  FB  user’  information  affirmatively  and  through  material  omissions 
regarding  the  privacy  protection  FB  promised  to  provide. 

904.  FB  willfully  and  recklessly  did  not  disclose  that  Plaintiffs’  FB  user’  information 
could  be  obtained  by  numerous  third  parties. 

905.  Plaintiffs  have  suffered  significant  harm  due  to  FB’  deceptive  and  unfair  business 
acts  and  practices. 

906.  Plaintiffs’  FB  user  information  has  tangible  value. 

907.  FB  repeatedly  told  Plaintiffs  that  they  alone  owned  their  FB  user’  information. 

908.  Additionally,  because  FB  directly  leveraged  unfettered  access  to  Plaintiffs’ 
information  in  order  to  obtain  revenues  from  numerous  third  parties,  Plaintiffs  have  a 
property  interest  in  FB’s  profits  because  FB  took  Plaintiff’s  property  without 
compensation. 
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909.  There  is  value  in  Plaintiffs’  information  that  FB  disseminated  to  FB  business 
partners,  “whitelisted”  applications  and  numerous  other  third  parties  as  demonstrated  by 
the  thirst  of  third  parties  and  FB  for  that  information. 

9 1 0.  Plaintiffs  lost  the  opportunity  to  receive  value  from  FB  and  these  third  parties  in 
exchange  for  their  FB  user’  information. 

911.  Plaintiffs’  FB  user’  information  is  still  in  the  possession  of  FB  and  numerous  third 
parties  who  have  used  and  will  use  it  for  their  own  advantage,  including  financial 
advantage,  or  have  sold  it  or  will  sell  it  for  value,  making  it  clear  that  Plaintiffs’ 
information  has  tangible  value. 

912.  Plaintiffs  are  at  increased  risk  of  identity  theft  due  to  FB  ’  s  practices  concerning 
sharing  users’  information  with  third  parties. 

913.  Plaintiffs  may  be  subjected  to  future  voter  fraud,  identity  theft,  medical  fraud,  and 
other  harms. 

914.  The  information  shared  with  third  parties  allows  this  information  to  be 
aggregated  with  other  information  to  identify  and  target  Plaintiffs. 

915.  FB  invaded  Plaintiffs’  privacy  by  failing  to  inform  Plaintiffs  that  FB  was  sharing 
their  information  with  numerous  third  parties,  including  but  not  limited  to  application 
developers,  FB  business  partners,  device  manufacturers,  mobile  carriers,  software 
makers,  security  firms,  banks,  credit  reporting  and  government  agencies,  chip  designers, 
retailers  such  as  Amazon  and  wholesalers. 
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916.  ’  FB  did  not  disclose  the  nature  or  the  extent  of  the  exploitation  of  Plaintiffs’  FB 
content  and  user’  information. 

917.  FB  invaded  Plaintiffs’  privacy  by  subjecting  them  to  psychographic  marketing 
that  exploited  intimate  aspects  of  their  identity,  including  emotional  and  psychological 
manipulation. 

918.  Plaintiffs’  information  was  exploited  without  Plaintiff’s  informed  consent. 

919.  Accordingly,  Plaintiffs  are  entitled  to  part  of  FB  ’  s  profits  that  were  generated  by 
their  information  without  informed  consent. 

920.  Plaintiffs  seek  an  order  to  enjoin  FB  from  such  unlawful,  unfair,  and  fraudulent 
business  acts  or  practices,  and  to  restore  to  Plaintiffs  their  interest  in  money  or  property 
that  may  have  been  acquired  by  FB  by  means  of  unfair  competition. 

92 1 .  Section  1 7203  of  the  UCL  authorizes  a  court  to  issue  injunctive  relief  “as  may  be 
necessary  to  prevent  the  use  or  employment  by  any  person  of  any  practice  which 
constitutes  unfair  competition.” 

922.  Plaintiffs  also  seek  the  following  injunctive  relief:  (1)  an  “opt  in”  rather  than  “opt 
out”  default  for  sharing  personal  content  in  all  of  FB’s  user  settings;  (2)  disclosure  of  the 
purposes  of  which  Plaintiffs’  personal  content  is  used  by  FB,  information  brokers,  device 
makers,  mobile  carriers,  software  makers,  security  firms,  application  developers, 
advertisers  and  other  third  parties  with  whom  FB  has  shared  users’  information  without 
their  consent;  (3)  destruction  of  all  personal  content  obtained  by  FB  and  all  such  third 
parties  where  such  content  is  within  FB’  control  or  possession;  (4)  a  complete  audit  and 
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accounting  of  the  uses  of  Plaintiffs’  FB  user’  information  by  third  parties;  (5)  a 
permanent  injunction  preventing  such  sharing  of  information  with  these  third  parties 
without  FB  users’  informed  consent  and  affirmative  authorization;  and  (6)  a  permanent 
ban  on  targeting  Plaintiffs  with  advertisements  or  marketing  materials  based  on 
information  from  information  brokers. 

XL  PRAYER  FOR  RELIEF 

WHEREFORE,  in  accord  with  the  above  paragraphs  and  as  this  Court  deems  appropriate, 
Plaintiffs  respectfully  request  the  following  relief: 

923 .  Plaintiffs  request  that  the  Court  enter  judgment  in  their  favor  and  against 
FB  Defendants,  as  follows: 

924.  Enter  Judgment  against  FB  Defendants  on  Plaintiffs’  asserted  causes  of  action  and 
award  Plaintiffs  appropriate  relief,  including  actual  and  statutory  damages,  restitution, 
disgorgement,  and  punitive  damages,  equitable,  injunctive,  and  declaratory  relief  as  may  be 
appropriate. 

925.  Award  all  costs,  including  experts’  fees  and  attorneys’  fees,  if  any,  as  well  as  the 
costs  of  prosecuting  this  action;  pre-judgment  and  post-judgment  interest  as  prescribed  by  law; 
and  grant  additional  legal  and  equitable  relief  as  this  Court  may  find  just  and  proper. 
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XII.  DEMAND  FOR  JURY  TRIAL 


926.  Plaintiffs  hereby  demand  a  trial  by  jury  on  all  the  issues  so  triable. 
Respectfully  submitted  by, 


Dated:  August  5,  2019 
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